CCPA vs AI: California's Privacy Law Is Fighting a Battle It Wasn't Built For

On January 1, 2020, the California Consumer Privacy Act went into effect. It was heralded as America's GDPR — the strongest consumer privacy law in the United States, finally giving Californians rights over their personal data. Six years later, every major AI company has collected, retained, and trained on Californians' data in ways that CCPA's drafters never anticipated. The law is real. The rights are real. And the gap between what the law promises and what enforcement delivers is a canyon. This is where California's privacy law meets the AI industry — and what happens when a 2018 statute tries to govern a 2026 technology. What CCPA Actually Gives You The California Consumer Privacy Act (amended by CPRA in 2020, effective 2023) grants California residents specific rights: Right to know : What personal information a business collects, uses, discloses, and sells Right to delete : Require businesses to delete personal information they've collected Right to opt out : Stop businesses from