OneTrust for CCPA

ResearchUse OneTrust DataGuidance® Research to research the CCPA by reading the full text of the law, summaries, handbooks, and regulatory guidance written by experts in the field. The resources in OneTrust DataGuidance® Research are continually updated to reflect the latest amendments and other legal changes.

PlanningLeverage OneTrust Maturity and Planning to get your organization ready by measuring your existing privacy program against the requirements in CCPA and other global privacy laws. Identify gaps, review recommended remediation steps, and track your organization's path to compliance. Use the planning assessment to create detailed reports for stakeholders and leadership in your organization to demonstrate the progress and value of your privacy program.

Data Flow TrackingComply with the 12-month "look back" requirement in CCPA by tracking the flows of data that impact California consumers with automatically generated lineage diagrams that describe the flow of data and parties involved. Use OneTrust Data Mapping Automation to define relationships between types of consumer and the data being collected. Then, track, manage, and analyze the categories of data being collected to comply with data requests made by consumers.

Consumer Rights ManagementDisplay the required Do Not Sell My Personal Data link on your websites and then use tools for identity verification, duplicate request management, and deadline tracking to manage the requests you receive. Fulfill Do Not Sell and information requests made by California consumers using dedicated workflows and response templates configured for CCPA consumer rights management.

Do Not Sell for CookiesCategorize and manage the cookies and advertising content on your site that pass and sell data. Use the OneTrust banner script to display your organization's notice of sale and allow consumers to opt out of the sale of their data.

Verified Preference Choices and ConsentIntegrate your existing marketing systems with OneTrust to track and verify consumer consent using flexible identifiers such as email address, membership numbers, device ID, and more. Pass the preference choices selected and consent given to existing systems to ensure opt-out requests are honored and allow your organization to re-solicit consent after the 12-month waiting period.

Vendor ManagementIdentify and assess your organization's vendors to better understand the companies and services with which you share consumer data and may need to contact in order to comply with Do Not Sell requests. Use the information in Vendorpedia by OneTrust to see security, privacy, and contact information for your vendors and potential vendors allowing for greater transparency as your organization evaluates its vendor relationships.

Data Breach Investigation and NotificationInvestigate potential data breaches and assess the impact for each jurisdiction, including California. Leverage templates, notification guidance, and workflows to comply with California data breach regulations and the "Cure Period" requirement in CCPA.

Data Minimization and Purpose LimitationUse OneTrust assessment templates to conduct Privacy Impact Assessments (PIAs) to evaluate your organization's processes and projects for the data minimization and purpose limitations laid out in CCPA and other privacy regulations. These assessment templates can be used to identify how data is used in your organization and automatically flag risks based on assessment responses.