The Data Map Template helps companies identify and centralize details about data collection, use, disclosure, and storage, which is the foundational step for developing a CCPA-compliant privacy program. The Data Map Sample Entries help companies understand the scope and level of detail they should aim for in completing their own data map.

This template identifies common data sharing relationships and analyzes whether they are at high, medium or low risk of triggering the sales-related obligations under the CCPA.

This customizable playbook helps companies manage and respond to consumer rights requests and is comprised of three parts: (1) an internal policy documenting the company’s commitment to complying with the law and describing the policies and procedures the company has established to honor consumer rights under the CCPA; (2) checklists for responding to each type of consumer rights request; and (3) template responses the company can use to communicate with consumers who submit rights requests. The playbook is also accompanied by a template webform and tracking log that companies can use to receive and monitor the status of rights requests.

This tool helps companies determine and document whether exceptions under the CCPA can limit their obligations to honor consumer rights requests.

This set of documents explains how the CCPA impacts a company’s agreements with its service providers and provides sample language to address the CCPA’s requirements.

The Privacy Policy checklist identifies the substantive and formatting requirements for a company’s privacy policy under the CCPA. The Accessibility Guidelines provide additional guidance about how companies can satisfy the accessibility requirements set forth in the CCPA Regulations.

This resource provides a framework for assessing whether companies offer “financial incentives” under the CCPA and explains the related compliance obligations, including notice, consent and data valuation requirements.

This customizable presentation provides an overview of the CCPA and can be used to address the employee training requirements under the CCPA.

This customizable template includes a set of policies that are designed to safeguard hardware, software, networks, devices, equipment and various other assets.

This checklist is intended to help in-house counsel and privacy professionals evaluate the privacy and security impacts of new initiatives that involve the collection, use and/or disclosure of personal information.