CPRA & CCPA Compliance
Discover, classify, and remediate exposed and unnecessary risk across your entire data footprint (including unstructured, dark data) with industry-leading speed and accuracy to recover faster from a breach, reduce response costs, meet notification timelines, and improve your future security posture
Book an Intro Call
What’s New with CPRA?
CPRA amends and expands upon CCPA, enhancing consumer rights and increases penalties for violations. The Act also created the California Privacy Protection Agency, an agency dedicated to the implementation and enforcement of state privacy laws. CPRA also eliminates the grace period in which violators can correct offenses without penalty, prohibits businesses from keeping PII for longer than they need to, triples the maximum fines for violations involving people under the age of 16, and enacts civil penalties for the theft of login information. CPRA goes into effect on January 1, 2023, pertaining to personal data collected on or after January 1, 2022.
How CPRA & CCPA Relate to Data Governance
Report on Data Use
Classify360 automatically maintains a thorough, digital chain of custody for all data processed within the platform. Eliminate human error and confidently comply with data processing agreements.
Minimize Personally Identifiable Information
Opt to remove duplicate files containing PII, redact PII from business critical data, or defensibly delete PII-laden obsolete data to reduce your sensitive data footprint.
Process Data Request with Precision
Respond to “right to erasure” requests by easily and securely accessing individuals’ personal data such as name, age, credit card number, postal address, IP address, social security number, driver’s license number, passport number, and more residing within your organization’s data. Seamlessly provide proof of fulfillment to requestors.
Orchestrate Data Security Controls
Grant data steward capabilities to select individuals within your organization, allowing them to manage the classification and remediation of data containing PII with security and precision.
Audit Your Confidential Data
Identify where CPRA and CCPA-relevant data resides within your data stores.
Mitigate Risks to Your Data
Classify360’s machine-learning powered information engine gathers all CPRA and CCPA-relevant data, grouping it according to refined data models. Data is segmented into internal, public, proprietary, and confidential buckets to inform decision making.
Understand Where Your Data Exists
Rely on classification models to demonstrate where your sensitive data lives, what patterns it follows, and how to best remediate data containing PII when an erasure request is filed.
Defensibly Delete Data
Take action to redact personal information while maintaining the key components of the document for analytical purposes, or defensibly delete documents all together – while clearly demonstrating timely compliance.
Are You Ready to Be CPRA and CCPA Compliant?
Frequently Asked Questions
All companies that serve California residents and have at least $25 million in annual revenue must comply with the law. In addition, companies of any size that have personal data on at least 50,000 people or that collect more than half of their revenues from the sale of personal data, also fall under the law.
Organizations employing strong data governance strategies are able to ensure data is secure, reliable, and available to authorized users who should have access to it. Classifying CPRA and CCPA-compliant data provides organizations insight into where their CPRA and CCPA-regulated data lives, how it it should be protected, and how to best maintain CPRA and CCPA compliance.
The California Privacy Rights Act and the California Consumer Privacy Act (CCPA) are state-wide data privacy law that regulates how businesses all over the world are allowed to handle the personal information (PI) of California residents.
The CPRA and CCPA protects “consumers” who are natural persons and who must be California residents in order to be protected and GDPR protects “data subjects,” who are natural persons and does not specify residency or citizenship requirements.
Classify360 software uses a manage-in-place principle for an organization’s data, ensuring data persists in its original location. The cloud platform for Classify360 does not make, store, or copy entire files from their original sources. Only indexes that make files searchable are kept in a compressed and illegible form. Analyses and resulting classifications reference data in their original locations. This approach eliminates the burden, cost, and risk of managing additional data and yields a very efficient store of searchable content for a responsive user experience.
