Consumer Requests Run Deeper Than They Appear
In just two weeks, the CCPA will make landfall—sending a tsunami of individual consumer requests asking for copies of the specific categories of personal information you have collected on them during the past 12-months.
What are some key questions to ask when preparing to respond to consumer requests under the CCPA? Here are a few questions that I believe are important!
Which of the 11 categories of personal information, as defined under the CCPA, must you provide in your response?
Do you know where all relevant personal information is stored within your systems or backups?
Do your data inventories have columns flagging personal information that's likely exempt under the Act?
Have you trained employees about CCPA requirements and how to direct consumers to exercise their rights?
Do you have systems in place for consumers to make requests and exercise all rights provided under the CCPA?
Does your business have a process in place for verifying the identity of the consumer making the request?
Have you updated vendor or customer contracts to comply with the CCPA and limit your organization's liability?
For more information, visit www.dpoadviser.com or contact [email protected].