California Privacy Compliance Checklist

California Consumer Privacy Act / California Privacy Rights Act — Step-by-step guide to compliance

Compliance Steps

Effective: January 1, 2020

1
Conduct a comprehensive data inventory and mapping exercise to identify all personal information collected, used, and shared
2
Update privacy notices to include all CPRA-required disclosures, including retention periods and sensitive data categories
3
Implement mechanisms to honor Global Privacy Control (GPC) signals and other universal opt-out preferences
4
Establish processes for responding to consumer rights requests within the 45-day statutory deadline
5
Conduct data protection assessments for high-risk processing activities such as profiling and selling personal information
6
Review and update service provider and contractor agreements to include CPRA-mandated provisions
7
Train employees handling consumer inquiries on CCPA/CPRA requirements and response procedures

Key Enforcement Details

Enforced By

California Privacy Protection Agency (CPPA) and California Attorney General

Penalty / Violation

$7,500

Cure Period

None

Private Right of Action

Yes

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.