California Consumer Privacy Act and California Privacy Rights Act compliance for businesses handling California consumer data.
Service pathway
California privacy assessments covering data practices, notices, consumer rights, opt-out processes, and service-provider oversight for organizations handling California consumers' personal information.
We inventory collection, use, storage, disclosure, sale or sharing, systems, vendors, notices, and consumer-request workflows. We then assess thresholds and current controls, prioritize gaps, and provide practical remediation evidence.
An evaluation of how the business collects, stores, shares, and secures California consumers' personal information, incorporating the CPRA amendments in effect since July 2023.
Build the data-collection and sharing inventory → review storage and security practices → assess applicability thresholds → identify gaps against current obligations.
A structured assessment makes exposure visible and reduces regulatory and statutory penalty risk, including risks associated with the private right of action.
A review of consumer-facing notices, consent mechanisms, “Do Not Sell or Share” opt-out flows, and disclosures.
Audit notices against required disclosures → test consent and opt-out paths → review for dark patterns → recommend updated notices and mechanisms.
Transparency surfaces are highly visible to consumers and enforcement teams, so accurate notices and usable choices matter.
Mapping and strengthening access, deletion, correction, and opt-out processes from intake through verified fulfillment.
Map intake → review identity verification → test fulfillment and deadline tracking → assess policy and staff training.
Documented, tested workflows help teams meet statutory deadlines consistently and preserve evidence of each response.
An assessment of contracts and controls governing service providers and contractors that touch consumer data.
Inventory third-party sharing → review service-provider and contractor terms → assess vendor oversight → document remediation recommendations.
Clear contracts and oversight reduce the risk that a vendor relationship is treated as an impermissible sale or sharing arrangement.
A practical next step
Share the standard, scope, and outcome you are working toward.
Start a conversationQuestions to resolve
It covers how California personal information is collected, used, stored, disclosed, sold or shared, plus notices, consumer choices, rights workflows, and third-party oversight.
Related routes
Start here
Share the standard, regulation, or customer requirement you are working toward. We will map a proportionate next step.
