The CPRA, while a California law, remains the standard when it comes to privacy compliance in the U.S. Seventy-six of the top 100 websites visited in the U.S. do not honor CPRA opt-out signals.