California’s new data privacy law, The California Consumer Privacy Act of 2018 (CCPA), is ushering in a new era of consumer privacy protections in the U.S. The law takes effect January 1, 2020, and will provide broad privacy protections for California residents - yet many corporations are not prepared for the realities of compliance. To ensure regulatory readiness, there are a handful of steps organizations should take. These steps will involve a substantial update to processes and workflows. Organizations must prepare for the impact the law will bring to their business, understand obligations and take steps to modify processes accordingly. Key initiatives, which can help reduce regulatory, operational and reputational risk, while establishing preparedness for CCPA enforcement, include:
- Readiness and Risk Assessments
- Data Mapping
- Updating Privacy Notices
- Managing Consent and Documenting Personal Data “Sales”
- Preparation for Responding to Data Rights Requests
- Training and Awareness
For a detailed analysis of the new regulation as well as an explanation of how to execute the above initiatives, please read our whitepaper.