CCPA / CPRA
CCPA compliance management
Compliancy helps organisations manage California privacy obligations under the CCPA as amended by the CPRA, including consumer rights requests, disclosures, retention decisions, service provider contracts and security measures.
What CCPA / CPRA is
- The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California consumers rights over personal information.
- Rights include access, deletion, correction, and opting out of sale or sharing of personal information.
- Businesses must publish disclosures, honour opt-out signals and contract appropriately with service providers.
What organisations need to manage
- An inventory of personal information categories and purposes
- Consumer rights request intake and response
- Notice at collection and privacy policy disclosures
- Opt-out of sale or sharing mechanisms
- Retention periods per category
- Service provider and contractor agreements
How Compliancy helps
Data inventory
Record categories of personal information, sources, purposes and retention decisions.
Rights requests
Track consumer requests with owners and deadlines so responses stay on time.
Vendor contracts
Keep service provider terms and review dates with the vendor record.
Shared privacy work
Reuse GDPR processing records where the same processing is in scope.
CCPA controls21John DoeAdministratorJD
CCPA readiness
AC-04Quarterly user access reviewSarah L.CCPAOperating
EN-01Encryption in transit and at restMarcus T.CCPAOperating
VN-01Vendor security reviewPriya R.CCPANeeds review
Reporting
Readiness you can show, not assemble.
Reports21John DoeAdministratorJD
Compliance overview
Track your compliance performance over time.
Last 6 monthsExport
78%Overall▲ 6%
235Policies▲ 12%
48Risks▼ 4%
12Assessments▲ 2
92%Tasks done▲ 8%
Compliance trend
DecJanFebMarAprMay
Compliance by category
78%Compliant
- Compliant 78%
- In progress 15%
- Non-compliant 7%
CCPA / CPRA questions
Does the CCPA apply to us?
It depends on revenue, volume of California personal information and other statutory thresholds. Your legal adviser should confirm applicability.
Does Compliancy handle opt-out signals?
Compliancy tracks the obligation, owners and evidence. Signal handling is implemented in your own web properties.
Can CCPA and GDPR be managed together?
Yes. Shared records and controls are mapped to both.
Related resources
Run CCPA / CPRA in one place.
Compliancy does not issue reports, certificates or legal advice. It manages the program behind them.