CCPA Compliance

CCPA data visibility requirements

The California Consumer Privacy Act (CCPA), passed in 2018 and effective as of January 1, 2020, requires your organization to have visibility into what data you possess and where it is located. CCPA enhances consumer protection and privacy for California residents and requires businesses and related entities to report data breaches of personal information. Your organization will also need to be able to take certain actions with this data.

Titus wins gold five times in the 2020 Cyber Security Excellence Awards!

What does the CCPA do?

The main goal of the CCPA is to improve the security and protection of an individual’s personal information. The CCPA offers consumers:

Ownership

California residents have the right to know what has been collected about them or their children, including any activity or data gleaned from their devices, and they have the right to tell businesses not to share or sell that information.

Once a year, businesses are required to inform people of what categories of information they have collected about them, their devices or their children. If that information is sold, they also have to let people know what categories of information were sold and to whom.

Control

California residents have the right to control what personal information is collected.

Consumers can have their personal information deleted from a business’ servers under specific circumstances. If a consumer tells a business not to share or sell their private information, the business cannot charge more or deny access to services. Businesses must prominently display a “Do not sell my data” link where consumers can opt out.

Security

Businesses are required to implement “reasonable security measures” to protect the personal information of California residents. If a breach does occur, businesses must file a report immediately. Businesses that do not adequately secure personal information will be subject to stiff fines and other penalties.

The CCPA applies to any organization worldwide doing business in California and exceeding annual gross revenues of $25 million, holding personal information of 50,000 or more California residents, or receiving 50% or more annual revenues from selling California residents’ personal information.

How Titus enhances CCPA compliance

Our data classification solution enables your organization to:

Identify personal information

Powered by machine learning, Titus solutions intelligently enhance the accuracy and efficiency of your data protection program by recognizing company – and regulation-specific content categories and analyzing your data at rest and in motion.

Data Categorization

Titus Classification Suite enables organizations to understand the data they have and how to handle it, mitigating risk of data breaches.

Secure the data

Titus allows organizations to adapt to the changing security and compliance needs with a configurable policy management platform. Organizations can set policy rules and levels of enforcement which can also trigger actions from other security products in their data protection ecosystem.

Meet CCPA requirements proactively

Since it’s implementation in 2020, changes to the regulation will be continue to be ongoing, and implications for organizations both within and outside of California may increase over time. As your trusted advisor, Titus can provide you with assistance to interpret future CCPA updates and ensure that you are updating your data protection policies accordingly to maintain compliance.