Reporting Dashboard Metrics to Comply with CCPA Guidelines

The Privacy Rights Automation dashboard feature can assist your company with displaying specific metrics to comply with the CCPA requirements. There is a passed amendment to CCPA Section 999.317(g) that would require companies to update and release metrics for all requests made in the last calendar year. In this article, we show the easiest and most efficient way to obtain these metrics (Number of: Requests to Know, Requests to Delete, Requests to Opt-Out, and Median or Mean) to ensure compliance.

About the regulation changes

There have been Amendments made to the CCPA that expresses in addition to the record-keeping requirements, the regulations also impose requirements that apply only to businesses that (on an annual basis) buy, receive, sell, or share the personal information of 4 million or more California consumers for commercial purposes. Such businesses must compile metrics related to data processing for the previous calendar year and post it in the business’s privacy policy or on another website page that is linked from the privacy policy. Businesses subject to these requirements, must also document a training policy to ensure employees responsible for handling such requests or the business’s compliance with the CCPA are appropriately aware of and trained on the CCPA and the Regulations.



There are four metrics that need to be accounted for:

Requests to Know

: The number of requests to know that the business received, complied with in whole or in part, and denied.

Requests to Delete

: The number of requests to delete that the business received, complied with in whole or in part, and denied.

Requests to Opt-Out

: The number of requests to opt-out that the business received, complied with in whole or in part, and denied.

Also, provide the Median or Mean: number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt-out.

To identify dashboard metrics

In this section, highlights the process of how to display the necessary information to ensure compliance on your Privacy Right's dashboard. Select the link, If you need more information on how to Using Privacy Rights Dashboards, Create Custom Dashboards, or Add and Configure Widgets for reference purposes.

Note:

This process is specifically for the CCPA amendments compliance.

  1. On the Reporting menu, select dashboards.
  2. Click the Create new button. The Create Dashboard modal appears.

  3. Complete the fields.
  4. Click the Create button.
  5. Click the newly created dashboard.
  6. Clcik the Add Widget button. The Add Widget screen appears
  7. Complete the fields. For more information, see Add Widget Screen Reference.
  8. Click the Save button.

Add Widget Screen Reference



Field
Description
Widget Name

Enter the name of the widget. This will appear as the label on the widget in your dashboard.

Description

Enter a description for the widget to provide an explanation of the data displayed.

Data Source

Select Data Subject Access Rights as the primary source of data for the widget.

Data Type

Select Request as the specific type of data you want to use for the widget.

Widget Type

Select the type of widget you want to create.

Function

Select Count as the method by which you want to aggregate the data.

Data Source

Select Data Subject Access Rights as the primary source data that will determine the groupings.

Data Type

Select Request to specify the data that will determine the groupings.

Attribute

Select Request Type as the attribute from data type that will determine the groups.

Filters

Click the Add Filter button to allow configuration.

Attribute: Select the attribute that will be used to filter the source data for the widget.

Operator: Select the operator for the filter.

Values: Select the attribute value(s) that act as the criteria for the filter.

Format Widgets

Show Data Labels on Chat: Select the

Show Axes Labels

Widget Height

Sort

To locate the median or mean information

The median or mean number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt-out.

  1. After completing the widgets portion, select the Reports menu on the Reports module.
  2. Select the newly created report.
  3. Add a filter for Submitted Date and select the Date Range of the Past Year to narrow the results for relevancy.


    Note:

    Users may also filter on each individual request type.

  4. Click the Export button.
  5. Open the Excel spreadsheet you just exported.
  6. On the spreadsheet, identify duration then use spreadsheet functions to calculate the median or mean for each request type.