Skip to content
Cyber Compliance

CCPA / CPRA → PCI DSS crosswalk

A control-by-control mapping between California Consumer Privacy Act (as amended by CPRA) and PCI DSS v4.0. 1 mappings.

CCPA / CPRAPCI DSSRelationshipNotes
§1798.100
Consumers' right to know and notice at collection
Req. 12
Support information security with organizational policies and programs
RelatedCurated
Governance & security policy

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.