Frameworks · Americas
CCPA / CPRA compliance, run as a living system
The California Consumer Privacy Act as amended by the CPRA gives California residents rights over their personal information and imposes duties on qualifying businesses.
Who it applies to
Businesses meeting the California thresholds that collect personal information from California residents, and their service providers and contractors.
What it demands
Consumer rights
Access, deletion, correction, opt-out of sale or sharing, and limits on sensitive data use.
Notices
Notice at collection, privacy policy content and retention disclosure.
Vendor governance
Service provider and contractor contract terms with oversight.
How Compli-Once runs it
- 1
Rights requests handled as tracked workflows with statutory response windows.
- 2
Notices and retention schedules held as evidence with review dates and owners.
- 3
Vendor contract terms verified through the vendor module against the same requirement set.
What you already satisfy
CCPA / CPRA overlaps with frameworks you may already run. The crosswalk quantifies existing coverage on day one, before you plan a single task.
Implement once, satisfy many
In a representative demonstration environment, 61% of a newly adopted regulatory framework was already satisfied by the existing ISO 27001 programme.
Illustrative, computed live per tenant in the platform.
Frequently asked questions
How are opt-out requests tracked?
As workflow records with the response deadline, the action taken and the evidence retained.
Does GDPR work carry over?
Substantially. The crosswalk maps shared duties and isolates the California-specific ones.