---
title: "CCPA service provider and contractor addendum"
url: "https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ccpa-service-provider-addendum"
type: "precedent"
site: "AI Law Framework"
id: "a24-us-ccpa-service-provider-addendum"
area_id: "A24"
kind: "agreement"
ai_level: "yellow"
version: 1
task_ids: ["A24-T1-R2", "A24-T1-R4", "A25-A20260923-3"]
law_stated_as_at: "2026-10-22"
---

# CCPA service provider and contractor addendum

> Contract terms for a California service provider or contractor under Civil Code §§ 1798.100(d) and 1798.140. It limits purpose, bars sale and sharing, and sets notice and deletion help.…

Canonical page: https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ccpa-service-provider-addendum  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

Contract terms for a California service provider or contractor under Civil Code §§ 1798.100(d) and 1798.140. It limits purpose, bars sale and sharing, and sets notice and deletion help. It is not a GDPR Article 28 agreement.

## Key facts

- Kind: Agreement. A contract between two or more parties.
- Practice area: [Technology, Media & Telecommunications / IT Contracts](https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts.md)
- Jurisdictions: United States
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the 4 authorities it cites, for United States.

## When to use it

Use when a business discloses personal information to a vendor for a business purpose and the vendor is to be a service provider or a contractor. Do not use it for a sale or a share, or where the vendor decides its own purposes. Confirm the customer meets the business test before relying on it.

## Used for these tasks

- [Draft a data-processing, IP, SLA or exit schedule from the playbook](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/draft-a-data-processing-ip-sla-or-exit-schedule-from-the-playbook.md)
- [Map data locations and cross-border flows from the vendor DPA](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/map-data-locations-and-cross-border-flows-from-the-vendor-dpa.md)
- [Draft a data-processing agreement from the processing facts](https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-data-processing-agreement-from-the-processing-facts.md)

## How AI may be used

AI may fill the purposes and the subcontractor list from the order. The lawyer decides whether the vendor is a service provider or a contractor, and whether the customer is a business, before anyone signs.

**AI may:**

- Tick the business purposes the order actually describes, from the list in this addendum
- Insert the names of subprocessors the lawyer has already approved
- Compare a vendor draft with the prohibitions in § 1798.140 and list what is missing

**AI must not:**

- Must not decide that the customer is a business, or apply an adjusted revenue figure
- Must not describe this addendum as a GDPR Article 28 agreement
- Must not allow a purpose that is cross-context behavioral advertising

**The lawyer checks:**

- The role is service provider or contractor, matching how the information is actually used
- The purposes are limited and specified, and each one is a business purpose the statute lists or the lawyer has confirmed
- The customer, not the vendor, decides consumer requests, and the vendor's help matches §§ 1798.105 and 1798.130

## Authorities

- [California Civil Code § 1798.100 (notice, purpose limitation, and required contract terms)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1798.100.&lawCode=CIV)
- [California Civil Code § 1798.140 (business, service provider, contractor, sale, and share)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1798.140.&lawCode=CIV)
- [California Civil Code § 1798.105 (deletion, and the service provider's role)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1798.105.&lawCode=CIV)
- [California Civil Code § 1798.130 (assistance with consumer requests)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1798.130.&lawCode=CIV)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ccpa-service-provider-addendum and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*