Skip to content
Cyber Compliance

CCPA / CPRA → PCI DSS crosswalk

A control-by-control mapping between California Consumer Privacy Act (as amended by CPRA) and PCI DSS v4.0. 1 mappings.

CCPA / CPRAPCI DSSRelationshipNotes
§1798.100
Consumers' right to know and notice at collection
Req. 12
Support information security with organizational policies and programs
RelatedCurated
Gouvernance et politique de sécurité

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.