How can I help with CCPA and CPRA?

Seeded with CCPA concepts, as amended by the CPRA: who the law applies to and the applicability thresholds, the California consumer rights to know, delete, correct, opt out of the sale or sharing of personal information, and limit the use of sensitive personal information, the difference between selling and sharing (including cross-context behavioral advertising), the roles of businesses, service providers, contractors, and third parties, opt-out preference signals such as Global Privacy Control, and the enforcement role of the California Privacy Protection Agency (CPPA).

• Work through whether the CCPA and its CPRA amendments apply to your business, using the do-business-in-California test together with the thresholds for annual revenue, the volume of personal information handled, and revenue from selling or sharing personal information, and map which obligations follow.
• Design a workflow to receive, verify, and respond to consumer requests within the required timelines, covering the rights to know, delete, correct, opt out of the sale or sharing of personal information, and limit the use of sensitive personal information, plus non-discrimination for consumers who exercise them.
• Set up the opt-out mechanics (the Do Not Sell or Share My Personal Information link and honoring opt-out preference signals like Global Privacy Control), draft the notice at collection and privacy policy, structure service provider and contractor contract terms, and keep the records an audit or CPPA inquiry expects.

It gives implementation guidance to speed up your work. It is not a substitute for legal advice, and it cannot represent you before the California Privacy Protection Agency or a court.