How OneTrust Helps with the CCPA: “Do Not Sell” & Consumer Rights Management

Build a CCPA-specific request intake web form linked directly from your company’s website.

Customize forms to determine consumer residency and process through a CCPA-specific workflow.

Centralize all requests into a single queue and define an automate triage workflow for fulfillment.

Enable consumers to attach evidence when submitting a request to verify their identity and proof of residency.

Leverage various identity validation approaches, including email or phone verification, or existing user login portals.

Integrate with various identity validation technologies, for example, Experian.

Find and retrieve consumer’s data across cloud-based and on-premises systems to assist in fulfilling a request.

Integrate with common business apps, such as CRMs, Marketing Automation, CASBs, CMDBs, and more.

Create manual review and redaction steps that can be inserted prior to responding to consumer requests.

Leverage built-in CCPA response templates and track against the 45-day response window.

Enable and track 90-day extensions as well as communicate extension requests to consumers.

Monitor excessive requests with ability to limit consumers to two requests within 12 months.

Display a "Do Not Sell My Personal Information" link or toll-free phone number on your company’s website.

Request more details from the consumer using a CCPA-specific “Do Not Sell” web form generated via OneTrust.

Automate the workflow to validate identity, triage the request, and discover the data in business systems.

Integrate directly with downstream systems such as internal or cloud business apps that may contain the consumer’s data.

Auto-block any advertising and data collection cookies on your websites or in mobile apps that are involved with the sale of data.

Display a CCPA-specific cookie banner using geolocation based on the visitor’s location.

Customize with a different consent model and include a “Do Not Sell” link.

Add links to a data subject request (DSR) web form on the banner.

Track verifiable consumer consent and sync across systems to avoid the unauthorized sale of data.

Enable consumers to opt-back-in to the sale of data after 12 months through a preference center.

Maintain central records of consumer consent to demonstrate CCPA compliance.

Utilize a policy and notice scan to automatically find and inventory your existing policies and notices.

Upload and host your policies and notices in OneTrust for a centralized view to manage and monitor.

Integrate the policy into your website and push out policy versions without web developer interaction.