CCPA

CCPA requires companies to comply with user requests for: All data collected and stored. Each category of sources where data is collected (e.g., financial, contact, medical). The business purpose for collecting and selling user data. A list of third parties that have access to a user’s data

8 Specific rights for consumers granted by CCPA

the right to know (request disclosure of) personal information collected by the business about the consumer, from whom it was collected, why it was collected, and, if sold, to whom;
the right to delete personal information collected from the consumer;
the right to opt out of the sale of personal information (if applicable);
the right to opt-in to the sale of personal information of consumers under the age of 16 (if applicable);
the right to nondiscriminatory treatment for exercising any rights; and
the right to initiate a private cause of action for data breaches.
the right to correct inaccurate personal information; and
the right to limit use and disclosure of sensitive personal information.

Right To Know

right to delete personal information

right to opt out of the sale of personal information

right to opt-in to the sale of personal information of consumers under the age of 16

right to nondiscriminatory treatment for exercising any rights

right to initiate a private cause of action for data breaches

right to correct inaccurate personal information

right to limit use and disclosure of sensitive personal information

CCPA Compliance Checklist

CCPA compliance doesn’t have to be a stressful, all-consuming effort within your organization. Here are a few tips and action items that you can take along with ways to ensure you’re CCPA compliant now, and well into the future.

1. Preparation

Identify and classify your data assets
Understand new consumer rights
Conduct a data risk assessment
Scour systems for hidden data

2. Implementation

Update your data privacy policy
Implement rights response processes
Adjust permission and access controls
Upgrade critical systems and software

3. Maintenance

Review your privacy policy annually
Conduct regular CCPA training
Eliminate unnecessary data regularly
Streamline rights response processes

Login