You've determined that your business is subject to the California Consumer Privacy Act ("CCPA") and are engaged in your CCPA assessment and compliance efforts. January 1, 2020 is close. It's time to measure your CCPA implementation progress.
This post is the first of three articles to help you assess your compliance progress to help meet upcoming CCPA obligations.
Data inventory and mapping is critical to determination of which personal data is subject to CCPA and to consumer access rights and other CCPA obligations and to make decisions and assessments necessary to ensure compliance.
Privacy professionals ask the following questions about personal data: What? How? When? Where? Why? Who? This information gives us the background we need to assess the privacy compliance implications of a business's use of personal data.
The CCPA gives consumers substantive rights intended to facilitate control over their personal data.
Have you established processes to ensure that consumers may send to you and you can honor a request to:
When conducting due diligence for an automated compliance solution, look for a platform that allows you to keep track of data elements and categories, third parties to whom data is sold, the purpose of data collection and other data attributes. Your solution should serve as the backbone for responding to consumer requests. Look for a solution that automates mechanisms for consumers to exercise their CCPA rights that facilitates management of the process of reviewing and fulfilling requests.
By Paige Boshell, Privacy Counsel LLC (Please note that this article is not intended as legal advice and is a high-level overview of some of the more significant CCPA requirements. Please contact legal counsel for a thorough description of CCPA obligations and how they apply to you.) © CENTRL, Inc. 2019