Business Obligations

Business obligations under the CCPA/CPRA require covered entities to inform consumers about data collection, provide mechanisms to access, delete or opt-out of sale of personal information, implement reasonable security measures, maintain detailed records, and train staff on compliance.