ccpa-compliance-mcp

MCP server for CCPA/CPRA compliance — browse California consumer privacy rights and business obligations, assess compliance readiness, generate privacy policies, DSAR response templates, and gap analysis for organizations handling California consumer data.

Features

• 25+ requirements covering the full California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) — consumer rights, business obligations, CPRA additions, and enforcement
• Real Civil Code §1798.100–1798.199 section references with actual penalty amounts
• Applicability thresholds ($25M revenue, 100K+ consumers, 50%+ revenue from selling PI)
• Reference to real enforcement actions (Sephora $1.2M, DoorDash $375K, etc.)

Tools

| Tool | Description | |------|-------------| | browse_requirements | Filter CCPA/CPRA requirements by category, keyword search, or Civil Code section | | assess_readiness | Score compliance readiness by category based on implemented requirements | | generate_privacy_policy | Generate CCPA/CPRA-compliant privacy policy sections for a given business type | | gap_analysis | Get a prioritized remediation roadmap based on current implementation gaps | | dsar_template | Generate DSAR response templates by request type with timelines and verification steps | | applicability_check | Determine if CCPA/CPRA applies based on business inputs (revenue, consumer count, data selling) |

Installation

npx ccpa-compliance-mcp

Claude Desktop Configuration

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "ccpa-compliance": {
      "command": "npx",
      "args": ["-y", "ccpa-compliance-mcp"]
    }
  }
}

Examples

Browse consumer rights

Use the browse_requirements tool with category "consumer_right"

Check if CCPA applies to your business

Use the applicability_check tool with annualRevenue 30000000, consumerCount 150000, sellsPersonalInfo false

Generate a privacy policy for a SaaS company

Use the generate_privacy_policy tool with businessType "saas"

Get a DSAR deletion response template

Use the dsar_template tool with requestType "deletion"

Assess your compliance readiness

Use the assess_readiness tool with implementedIds ["CR-1", "CR-2", "BO-1", "BO-2"]

Get a gap analysis with remediation roadmap

Use the gap_analysis tool with implementedIds ["CR-1", "BO-1"]

Learn More

Automate CCPA/CPRA compliance: complianceiq.site