Privacy regime coverage — found from sitemap — TrustWorks

Cited by

Facts read from this source

• Onetrust migration trial Report an error

  “Now available: 🔀 Free OneTrust migration trial”

• CCPA data mapping Report an error

  “Data mapping: identify systems, vendors, personal-information categories and data flows.”

• Consumer requests Report an error

  “Consumer requests: centralise intake, identity checks, deadlines, decisions and fulfilment.”

• Preference governance Report an error

  “Preference governance: connect opt-out and limitation choices to systems and responsible teams.”

• Risk assessments Report an error

  “Risk assessments: use structured questionnaires, risk analysis, approvals and remediation tracking.”

• Vendor oversight Report an error

  “Vendor oversight: maintain contracts, roles, purposes and evidence across the vendor lifecycle.”

• Audit readiness Report an error

  “Audit readiness: assign owners and preserve an accountable history of actions and decisions.”

• Single platform claim Report an error

  “TrustWorks brings these CCPA workflows together in one collaborative privacy platform.”

• Solution modules Report an error

  “Data Map Record of Processing Activities TrustWorks Engage AI Governance Data Subject Requests Privacy Assessments Risk Management Consent Management”

• Award Report an error

  “Privacy Management & AI Governance solution. Winner of the Most Impactful Data Privacy Product at the PICCASO Awards.”

• CCPA revenue threshold 2025 Report an error

  “From 1 January 2025, the revenue threshold is $26.625 million in annual gross revenue for the preceding calendar year.”

• CCPA data threshold Report an error

  “The law can also apply where a business buys, sells or shares the personal information of 100,000 or more California residents or households, or earns 50% or more of annual revenue from selling or sharing California residents' personal information.”

• Request deadlines Report an error

  “Businesses generally confirm receipt of a request to know, delete or correct within 10 business days and provide a substantive response within 45 calendar days. The response period may be extended by another 45 days when reasonably necessary and when the consumer is notified during the initial period.”

• Optout deadline Report an error

  “Requests to opt out of sale or sharing and requests to limit the use or disclosure of sensitive personal information should be processed as soon as feasibly possible and no later than 15 business days.”

• Administrative fines Report an error

  “Current administrative fines can reach $2,663 per violation or $7,988 for an intentional violation and certain violations involving consumers known to be under 16.”

• Statutory damages Report an error

  “For eligible security breaches, consumers may seek statutory damages of $107 to $799 per consumer per incident or actual damages, whichever is greater.”

• Enforcement agencies Report an error

  “The California Privacy Protection Agency and the California Attorney General can investigate and enforce the CCPA.”

• Requirements 2026 Report an error

  “California regulations effective 1 January 2026 introduced or clarified obligations concerning risk assessments, annual cybersecurity audits and automated decision-making technology, commonly called ADMT.”

• Cybersecurity audit certification Report an error

  “Cybersecurity audits: businesses meeting the regulatory thresholds must complete annual independent audits. Certification deadlines are phased from 2028 to 2030 according to annual revenue.”

• Admt deadline Report an error

  “ADMT: businesses using automated decision-making technology for significant decisions must prepare for notices, access information and opt-out requirements that begin in 2027.”

• Optout preference signals Report an error

  “Businesses must also recognise valid opt-out preference signals, such as Global Privacy Control, where the regulations require them to do so.”

• Private right of action Report an error

  “The CCPA includes a private right of action for certain security breaches involving specified personal information.”

• CCPA definition Report an error

  “The California Consumer Privacy Act, commonly called the CCPA, is California's comprehensive consumer privacy law. The California Privacy Rights Act, or CPRA, amended and expanded it.”

• Nonprofits excluded Report an error

  “Nonprofits and government agencies are generally outside the definition of a business, although other privacy laws may still apply.”

• Core capabilities Report an error

  “Consumer data mapping Request and identity workflows Notice and purpose records Opt-out and consent orchestration Risk assessments and audit evidence Vendor and contract oversight”

• Clients named Report an error

  “Glovo Wildlife Studios VTEX”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO Audit readiness & evidence
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Audit readiness & evidence
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Skeptic Records & DPIA depth
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence