CCPA template · CCPA and CPRA
Privacy Notice / Privacy Policy
Consumer-facing privacy notice disclosing data collection, use, sharing practices, and consumer rights under CCPA/CPRA. Written for your company, citing the controls below.
- Sections
- 9
- Controls cited
- 7
- Formats
- PDF, Word
- Shelf
- 8 CCPAdocuments in all
No card needed to start.
CCPA9 sections
Privacy Notice / Privacy PolicyConsumer-facing privacy notice disclosing data collection, use, sharing practices, and consumer rights under CCPA/CPRA.
- Cites
- §1798.100, §1798.110, §1798.115 and 4 more
- Formats
- PDF and Word
CCPA shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Introduction and Scope
- Categories of Personal Information Collected
- Purposes for Collection and Use
- Sale, Sharing, or Disclosure of Personal Information
- Sensitive Personal Information
- Your Rights Under CCPA/CPRA
- How to Submit a Consumer Rights Request
- Retention Periods
- Contact Information
Controls it cites
The CCPA controls first, then the matching controls in other frameworks.
- §1798.100§1798.100: Consumer Right to KnowCCPA
- §1798.110§1798.110: Right to Know CategoriesCCPA
- §1798.115§1798.115: Right to Know DisclosuresCCPA
- §1798.130§1798.130: Notice & Response RequirementsCCPA
- GDPR Art. 12Transparent CommunicationGDPR
- GDPR Art. 13Information at CollectionGDPR
- SOC 2 P1.1Privacy: NoticeSOC 2
- CCPA9 sections
Consumer Rights Procedures
Cites§1798.100 §1798.105 §1798.106 +4 +5PDF · WordCites §1798.100, §1798.100: Consumer Right to Know (CCPA); §1798.105, §1798.105: Right to Delete (CCPA); §1798.106, §1798.106: Right to Correct (CCPA), and 4 more. - CCPA7 sections
Data Inventory & Mapping Policy
Cites§1798.100 §1798.110 §1798.121 +3 +4PDF · WordCites §1798.100, §1798.100: Consumer Right to Know (CCPA); §1798.110, §1798.110: Right to Know Categories (CCPA); §1798.121, §1798.121: Right to Limit SPI Use (CCPA), and 3 more. - CCPA7 sections
Opt-Out & Do Not Sell/Share Policy
Cites§1798.120 §1798.135 §1798.121 +2 +3PDF · WordCites §1798.120, §1798.120: Right to Opt-Out of Sale (CCPA); §1798.135, §1798.135: Opt-Out Links & GPC (CCPA); §1798.121, §1798.121: Right to Limit SPI Use (CCPA), and 2 more. - CCPA7 sections
Data Retention & Deletion Policy
Cites§1798.105 §1798.130 GDPR Art. 5 +3 +4PDF · WordCites §1798.105, §1798.105: Right to Delete (CCPA); §1798.130, §1798.130: Notice & Response Requirements (CCPA); GDPR Art. 5, Principles of Processing (GDPR), and 3 more. - CCPA7 sections
Vendor & Service Provider Contracts Policy
Cites§1798.140 GDPR Art. 28 SOC 2 CC9.2 +2 +3PDF · WordCites §1798.140, §1798.140: Definitions (Service Provider) (CCPA); GDPR Art. 28, Processor Obligations (GDPR); SOC 2 CC9.2, Risk Mitigation: Vendor & Business Partner (SOC 2), and 2 more. - CCPA7 sections
Security Practices Policy
Cites§1798.150 SOC 2 CC5.1 SOC 2 CC6.1 +3 +4PDF · WordCites §1798.150, §1798.150: Private Right of Action (CCPA); SOC 2 CC5.1, COSO Principle 10: Control Activities (SOC 2); SOC 2 CC6.1, Logical & Physical Access: Security Software (SOC 2), and 3 more.
CCPA on its own
- Documents
- 8
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so CCPA + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.