CCPA is California's privacy law. It gives California residents rights to know what personal data a business holds about them, to delete it, to opt out of its sale, and to limit how sensitive personal data is used. The 2023 CPRA amendments expanded these rights further.
Although CCPA is a state law, its reach is broad. Most US businesses doing business with California residents fall under it, which in practice means most US businesses. A vendor that handles US data without a documented CCPA process is exposing the customer to compliance risk.
For a CX-AI buyer, the practical questions are: can a California consumer request a copy of every interaction they had with the agent? Can the customer delete those records on request? Does the vendor pass those requests through to its sub-processors? A serious vendor answers yes to all three with documented procedures.
Vorel exposes data-subject access and deletion through the customer's tenant settings; requests are passed through to sub-processors automatically.