Assuming the California residents about whom you collect and use personal information are customers (as opposed to employees, applicants, contractors, or B2B contacts), the CCPA requires you to do the following:
- Map the personal information about California customers that you collect and use.
- Design, implement, and document procedures to manage compliance with the broad array of consumer rights established by the CCPA – for example, the right to know what personal information a business collects about you, how the business uses that information, and who it shares that information with; the right to opt out of the sale of that information; and the right to request deletion of that information (subject to certain exceptions).
- Train workforce members on those policies and procedures.
- Make sure you have an adequate data security program in place.