Large photo of Transcend team

Comply with California’s CPRA

The California Privacy Rights Act (CPRA) extends California's privacy protections and increases the technical complexities of compliance. With enforcement underway, leading companies are using Transcend to encode privacy directly into their tech stacks for seamless, yet robust compliance.

Large photo of Transcend team


What businesses need to know

California’s CPRA amends the CCPA—expanding consumer rights, adding the sensitive personal information data designation, removing the 30 day cure period, and more.

Effective Jan 1, 2023

The CPRA went into effect January 1, 2023 and, after a surprise reversal of a 2023 delay, enforcement is currently underway. For more details on CPRA compliance, check out our full guide.

Expanded consumer rights

The CPRA expands the privacy requirements businesses must fulfill, including targeted advertising opt outs (Do Not Share) and the right to limit sensitive personal information. Companies seeking to honor privacy rights under CPRA's scope need a solution that can flex and scale with as regulation shifts.

CPPA enforcement

The CPRA creates a new agency, the California Privacy Protection Agency (CPPA), responsible for creating and enforcing California’s data protection privacy laws. Consistent with the current CPPA, the California Attorney General still retains enforcement powers.

A screenshot of targeted advertising data flows in Transcend Consent


Honor browser privacy signals and opt-out requests.

The CPRA requires companies to provide their users the ability to opt out of the selling or sharing of their personal data–including data shared with most ad networks for targeted, or cross-context behavioral, advertising.

Transcend is the only platform that manages this end-to-end – from governing both client-side and backend data flows to enforcing end user preferences across ad platforms.

A screenshot of targeted advertising data flows in Transcend Consent


Engineered to fit your unique needs.

The CPRA expands individual rights to include job applicants, contractors, employees and minors. As these data subject rights broaden, the data systems, legal holds, and other nuances your business needs to consider will inevitably increase.

Depend on Transcend to handle it all. We've engineered Privacy Requests with flexibility, so you can overcome the privacy hurdles of today and the needs of tomorrow with peace of mind. Read our docs on how to support employee data rights.

const privacyRequest = await transcend.get(`/data-subject-request/${id}`);

if (privacyRequest.type === 'ERASURE') {
  await deleteUserById(privacyRequest.coreIdentifier);

Submit a request programmatically to Transcend to be processed. Or, use Transcend's no-code Privacy Center to receive requests.

A screenshot of Transcend Data Mapping


See personal data, wherever it lives

From requirements in data minimization to new purpose and data retention limitations, CPRA codifies data governance concepts, all requiring granular metadata about how and why data is used and stored, as well as the ability to modify that data. With CPRA, Data Mapping is no longer a nice to have, it is foundational to comprehensive compliance.

A screenshot of Transcend Data Mapping


Engineered to enable efficient operations and seamless compliance.

Data Mapping logo

Data Mapping

Through powerful, automated scans, Transcend discovers your company’s data silos and organizes data schemas and objects. Enjoy singular visibility, all in a collaborative platform where you can delegate tasks, see system owners, and generate audit logs or compliance reports.

Privacy Requests Logo

Privacy Requests

A fully automated, easy-to-use operating system for privacy request compliance. From access to opt out requests, and more. Secure infrastructure governs user data anywhere it's stored, without human intervention.

Consent logo


California requires businesses to recognize and honor all opt-out requests, including those from privacy signals like GPC. Transcend goes beyond basic compliance and ensures user opt outs are propagated downstream by automatically appending platform-specific flags like Facebook’s LDU and Google’s RDP.

Leaders say Transcend makes privacy easy

We're proud to be recognized as a Leader by G2 based on reviews from our customers. Transcend has also been recognized as Easiest to Do Business With, Easiest Setup, and more.

A G2 reviews badge with the words Easiest Admin, Winter 2023
A G2 Reviews badge with the words Easiest To Do Business With, Winter 2023
A G2 Reviews badge with the words Easiest Setup, Winter 2023
A G2 Reviews badge with the words Leader, Winter 2023