What is California Consumer Privacy Act (CCPA)?
The California Consumer Privacy Act (CCPA) came into effect from January 1, 2020. It is the first law in the United States that gives the strongest privacy rights to consumers and it’s setting the new standards for other proposed state legislation. The California Consumer Privacy Act (CCPA) is a law that gives residents of California more control over how businesses handle their personal information. It ensures transparency, disclosure, and the ability to opt out of sharing their data.
Mandatly CCPA compliance software solution makes it easier to achieve CCPA compliance and maintain the maturity levels as you progress in your privacy compliance management journey.
Key California "CCPA" Requirements
- Up-to-date Privacy Notices including the data collection notice, data selling notice, financial incentives notice, etc. to be shown on the website.
- “Do not sell my personal information” link or button on the website for easy opt-out.
- Timely response and fulfilling of consumer requests to Information Access, Data Deletion, Data Portability, etc.
- Data inventory and mapping of in-scope personal data and instances of “selling” of data.
- To keep handy reports and logs to demonstrate compliance.
How Mandatly’s compliance software solution will help you achieve CCPA Compliance
Mandatly’s CCPA compliance automation solution goes above and beyond, providing the best CCPA compliance software with complete privacy risk management features. This helps you to make effective business decisions while eliminating privacy risks and ensuring compliance with CCPA privacy notices. Discover the benefits of our solution for CCPA compliance automation today.
How Mandatly helps you achieve CCPA compliance?
- Privacy Notices
- Do not sell my information
- Consumer Rights
- Data Inventory and Mapping
- Privacy Assessments
- Analytics
CCPA requires every business to place the notice of data collection, selling of data, financial incentives, and privacy policy on their website. Under the California Consumer Privacy Act (CCPA), businesses must give clear Privacy Notices. These notices explain what type of personal information is collected, why it’s collected, and what rights consumers have. It’s all about being open about how data is handled and making sure people know about their privacy rights.
Generate privacy notices for your website or applications to inform customers about the collection, processing, and sharing of their Personal Information.
- Predefined policy templates as required by various compliances such as CCPA, GDPR, and more.
- Automatically maintains version history and policy views of the policy.
- Geotargeted policies based on the applicable data privacy regulations.
- Fully integrated with cookie scanning to update cookie notices.
Consumers exercising their right under CCPA have the right to opt out of the sale of their personal information under CCPA Compliance through a clear and conspicuous link titled “Do Not Sell My Personal Information,” to be placed on the business’s website or mobile application. This innovative tool ensures businesses align with the California Consumer Privacy Act (CCPA), granting individuals control over the sale of their personal information.
Enables customers to opt-out of the sale of their personal information.
- Place “Do Not Sell My Personal Information” button/link on your website.
- Easy opt-out with a click of button/link from the cookie based and non-cookie based sale of personal information.
- Audit ready reports to demonstrate your compliance with the do not sell requirements.
CCPA grants certain privacy rights to consumers such as Right to Information Access, Right to Data Deletion, Right to Data Portability, etc.
The CCPA (California Consumer Privacy Act), provides consumers with important privacy rights. From the Right to Information Access to Data Deletion and Data Portability, individuals gain control over their personal information. Businesses striving for CCPA compliance often leverage specialized CCPA compliance software.
Streamlined end-to-end DSAR fulfillment: Automated identity verification, data retrieval & erasure, and secure response via a communication portal.
- Centrally manage Data Subject/Consumer rights requests.
- Automatic data retrieval/erasure from various systems to fulfill the data requests.
- Secured Portal for ease of communication with consumers.
- Demonstrates compliance using end to end DSAR audit logs.
Data inventory and mapping of in-scope personal data and instances of “selling” data. CCPA compliance relies on User Data Inventory and Mapping. CCPA compliance software automates data identification, tracking, and mapping, ensuring transparency and detecting data selling instances. It’s a streamlined solution for businesses to manage personal data efficiently and adhere to regulations.
Maintain your data sources and map data flows to meet the CCPA "Lookback" requirements.
- Self-service portal that enables tracking of all the systems (Application, Database, Website, Product, File System).
- Discover personal data by publishing pre-defined questionnaires and/or leverage Mandatly API technology for auto-discovery.
- Identify the personal data categories, collections, security measures and retention using pre-configured assessments.
Determine and mitigate the significant risk to consumers’ privacy or security arising from your data flows. CCPA compliance mandates User Privacy Assessments to identify and mitigate risks to consumer privacy and security in data flows. Using CCPA compliance software streamlines this process, efficiently addressing potential privacy concerns and aligning with regulatory requirements.
Bundled with intelligence to uncover and assess privacy risks that your business can be exposed to.
- Allows you to initiate all type of privacy and security assessments.
- Increase efficiency by using pre-built assessment templates (PIA/DPIA/PbD, vendor and security).
- Risks are flagged automatically providing the full visibility to manage your data privacy compliance.
To keep a comprehensive view on your data flow and keep handy reports and logs to demonstrate compliance.
Reporting features are built into the system to get a holistic view of the CCPA compliance program for different stakeholders
- Simplified visuals of all the data using the graphic representation.
- Handy reports and logs in pdf format to demonstrate compliance with ease.
- Automatic reminders, reassignment and tracking of tasks.
Accelerate Your Path to CCPA Compliance -
Reach Out to Our Experts!
FAQs
CCPA: The California Consumer Privacy Act (CCPA) is a law that gives California residents certain rights over their personal information collected by businesses.
Who it applies to: CCPA applies to businesses that collect the personal information of California residents and meet one of the following criteria:
- Have annual gross revenues exceeding $25 million
- Possess the personal information of 50,000 or more California residents, households, or devices
- Derive more than 50% of annual revenue from selling consumers’ personal information
California residents have the right to:
- Know what personal information is collected about them and how it’s used.
- Access their personal information maintained by a business.
- Delete their personal information.
- Opt-out of the sale of their personal information.
- Receive equal service even if they exercise their rights.
- Data inventory and mapping: Identify and map all personal information collected, stored, and used.
- Privacy notice: Create a clear and concise privacy notice that explains how personal information is collected, used, and shared.
- Data subject access requests (DSARs): Establish a process for handling consumer requests to access, delete, or opt-out of the sale of their personal information.
- Security measures: Implement reasonable security measures to protect personal information from unauthorized access, disclosure, or destruction.
- Training: Train employees on CCPA requirements and how to handle consumer data requests.
Yes, CCPA requires businesses to disclose certain information on their websites, including:
- The categories of personal information collected.
- The purposes for which the information is used.
- The categories of third parties with whom the information is shared.
- Links to methods for consumers to exercise their rights.
CCPA applies to most for-profit businesses operating in California or doing business with California residents.
Some exemptions exist, including:
- Government entities
- Non-profit organizations
- Insurance institutions, agents, and support organizations: The CCPA does not apply to personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (GLBA) or the California Insurance Information and Privacy Protection Act (IIPPA).
CCPA is evolving, and businesses should stay informed about any amendments or interpretations. For the latest updates, you can consult the California Attorney General’s website.
Recent Articles
Cookie Consent Solutions for GDPR & CCPA Compliance
Data Mapping Requirement for CPRA & CCPA Compliance
Difference between CDPA, CCPA, CPRA and CPA
CDPA, CCPA and CPRA : Key Difference & Similarities
What is California Consumer Privacy Act?