Of all of the state consumer privacy laws on the books, CCPA and CPA are most prescriptive they relate to the content that must be in privacy policies and notices at collection: Loyalty and Incentive Programs, Opt-out Rights, Sensitive data and Automated Decision-making