{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-100",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-100)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-13",
    "fingerprint": "ewai:se:eca634",
    "proof": "sha256:d7ec56001be4f23e437063fd4b833aa8e8844bd970e1efa73832347f26e63cd5",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "agent_id": "agent:us:ccpa:agent-sec-1798-100",
  "agent_version": "1",
  "schema_version": "1",
  "graph_version": "2026-10-10.2",
  "section": "1798.100",
  "title": "General Duties of Businesses that Collect Personal Information",
  "question": "What must a business tell consumers at or before the point of collection under CCPA §1798.100?",
  "requirements": [
    {
      "id": "requirement:us:ccpa:1798-100-a-1",
      "provision": "§1798.100(a)(1)",
      "title": "Notice at collection: categories, purposes, sale or sharing",
      "roles": [
        "business"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-a-2",
      "provision": "§1798.100(a)(2)",
      "title": "Notice at collection: sensitive personal information",
      "roles": [
        "business"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-a-3",
      "provision": "§1798.100(a)(3)",
      "title": "Retention period per category",
      "roles": [
        "business"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-b",
      "provision": "§1798.100(b)",
      "title": "Third parties controlling collection",
      "roles": [
        "third-party"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-c",
      "provision": "§1798.100(c)",
      "title": "Data minimisation and purpose limitation",
      "roles": [
        "business"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-d",
      "provision": "§1798.100(d)",
      "title": "Contracts with third parties, service providers and contractors",
      "roles": [
        "business",
        "service-provider",
        "contractor",
        "third-party"
      ]
    },
    {
      "id": "requirement:us:ccpa:1798-100-e",
      "provision": "§1798.100(e)",
      "title": "Reasonable security procedures",
      "roles": [
        "business"
      ]
    }
  ],
  "sanction": {
    "id": "sanction:us:ccpa:admin-fine-1798-155",
    "provision": "§1798.155(a)",
    "per_violation_usd": 2500,
    "per_intentional_or_minor_usd": 7500,
    "adjusted": "not_in_register"
  },
  "counts": {
    "requirements": 7,
    "controls": 6,
    "enforcement_cases": 3,
    "enforcement_total_usd": 4100000,
    "max_fine_usd": 1550000
  },
  "deterministic": true,
  "agent_hash": "1a6d9cff54404ed84da05f20dcfe14e7aa998da312a95bd44a3554ceac342fb2",
  "hash": "sha256:d7ec56001be4f23e437063fd4b833aa8e8844bd970e1efa73832347f26e63cd5",
  "endpoints": {
    "self": "https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-100",
    "node": "https://legal.exploreworldai.com/api/public/v1/node/agent/agent%3Aus%3Accpa%3Aagent-sec-1798-100",
    "page": "https://legal.exploreworldai.com/agent/ccpa/1798-100",
    "statute": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100"
  },
  "related_agents": [
    "https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-105",
    "https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-120"
  ],
  "not_covered": {
    "algorithmic_disgorgement": "Model deletion orders stem from US FTC enforcement, not from the CCPA. not_in_register for this agent."
  },
  "provenance": {
    "primary_source": "https://cppa.ca.gov/pdf/20260101_ccpa_statute.pdf",
    "official": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100",
    "read_at": "2026-10-10",
    "cases": "official announcements by the California Attorney General and the CPPA",
    "method": "verbatim statute; editorial case and control mapping (unreviewed)"
  },
  "source": "Source: NovaCopilot",
  "version": "legal-2026-10-13",
  "expires": "2026-10-15T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-13+legal-2026-10-13+2026-10-13T21:57:55",
    "content_hash": "sha256:d7ec56001be4f23e437063fd4b833aa8e8844bd970e1efa73832347f26e63cd5",
    "revalidate_after": "2026-10-14T02:24:19.016Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/ccpa-agent/sec-1798-100",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "authority_decisions": 3,
    "control_mappings": 6
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}