Assuming the California residents about whom you collect and use personal information are customers (as opposed to employees, applicants, contractors, or B2B contacts), the CCPA requires you to do
- Map the personal information about California customers that you collect and use.
Design, implement, and document procedures to manage compliance with the broad array of consumer rights established by the CCPA – for example, the right to know what personal information a
business collects about you, how the business uses that information, and who it shares that information with; the right to opt out of the sale of that information; and the right to request
deletion of that information (subject to certain exceptions).
- Train workforce members on those policies and procedures.
- Make sure you have an adequate data security program in place.
consumers, you include categories of information that may be collected in connection with future data enhancement projects. These should include: Demographics, Psychographics, Segmentation,
Propensity Models, as well as Email Addresses, Phone Numbers, and Mobile Device IDs. The reason to disclose these categories now is that this disclosure will position you to undertake future
enhancement projects without having to first make revised disclosures to your customers.