CCPA / CPRA · California Privacy · Evidence & Implementation Kit
Comply with the CCPA and CPRA, without decoding the consumer rights and opt-out rules yourself.
Every CCPA and CPRA obligation handed to you as an adopt-ready control, from the consumer rights and the opt-out of sale or sharing through sensitive PI limits and service-provider contracts, with the evidence a regulator examines.
Compliant in a weekend, not a quarter.
Here is the honest situation. The CCPA, amended by the CPRA, is the leading US state privacy law, enforced by a dedicated agency, the CPPA. It gives consumers rights to know, delete, correct and opt out of the sale or sharing of their data and to limit sensitive personal information, requires specific notices and opt-out links, mandates honoring the Global Privacy Control, and imposes contract terms on service providers. Working out whether you are in scope, standing up the rights and opt-out mechanisms and evidencing them is weeks of work, and a missing Do Not Sell link or an unhonored opt-out signal is exactly where businesses fall short.
This Kit removes that interpretation. It is every CCPA and CPRA obligation written as an adopt-ready control you personalize in a weekend, with the evidence a regulator examines.
What you get, the moment you buy
36
Obligations as adopt-ready controls. Every CCPA and CPRA obligation, from the consumer rights and the opt-out of sale or sharing through sensitive PI, notices, service-provider contracts and request handling, written so you personalize and apply it.
36
Evidence-they-examine checklists. For each control, exactly what a regulator examines, plus where businesses fall short, so you close the gap first.
1
Privacy Control Matrix, pre-built. Every obligation in a working spreadsheet, ready to record status, owner and evidence location.
1
Gap & Readiness Assessment. Score each obligation and the workbook returns your readiness as a single percentage, and exactly what to fix next.
Grounded in the CCPA as amended by the CPRA, with the consumer rights, the opt-out of sale or sharing, the limit-sensitive-PI right, the opt-out links and the Global Privacy Control called out. Editable Word and Excel files.
The opt-out link and the GPC are what enforcement checks
The CPPA and plaintiffs look first at whether you offer the Do Not Sell or Share link, honor the Limit Sensitive PI right, and respect the Global Privacy Control browser signal. This Kit builds those opt-out mechanisms and the signal handling, so the things enforcement checks first are in place.
What one control looks like
This is determining scope and applicability, whether the CCPA and CPRA apply to your business. All 36 are built to this depth.
CCPA-1 Determine CCPA/CPRA applicability against statutory thresholds SCOPE
Put this control in place
[Business] shall annually assess and document whether it meets any CCPA applicability threshold, being a for-profit entity doing business in California that determines the purposes and means of processing consumer personal information and either has annual gross revenue above the statutory amount, buys, sells, or shares the personal information of 100,000 or more consumers or households, or derives 50 percent or more of annual revenue from selling or sharing personal information.
Legal note.
Reassess whenever revenue, acquisitions, or new data-driven products materially change the volume of consumer or household personal information processed.
Evidence a regulator examines
- Annual applicability determination memo signed by legal or privacy counsel
- Revenue figures and consumer/household volume calculations supporting the determination
- Register of California-directed processing activities
- Board or executive acknowledgement of CCPA obligations
Common finding they raise: Applicability is assessed once at launch and never revisited as revenue or data volumes grow across the threshold.
Why this is not another template pack
- The evidence is the point. A privacy claim you cannot evidence is exposure. This tells you what a regulator examines and where businesses fall short, for every obligation.
- Opt-out and sensitive PI built in. The opt-out of sale or sharing, the limit-sensitive-PI right, the opt-out links and the Global Privacy Control are written into the controls, the mechanisms enforcement checks.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. The CCPA aligns with other US state privacy laws, so this work feeds a broader multi-state privacy program.
Who buys this
Businesses subject to the CCPA and CPRA and the privacy, legal and marketing leads who own it, plus consultants preparing for compliance. Whether it is a first assessment or ongoing compliance, you save weeks and walk in with the rights, opt-outs and evidence ready.
By the end of the weekend you will have
✓ An adopt-ready control for all 36 obligations
✓ A completed privacy control matrix
✓ The evidence a regulator examines
✓ Your opt-out mechanisms and GPC handling in place
✓ A readiness percentage and a fix list
✓ The common shortfalls closed
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in the CCPA and CPRA. For a specific matter consult counsel; this gets your controls and records in order fast.
Does it cover opt-out of sale and sharing? Yes. The opt-out of sale or sharing, the Do Not Sell or Share link, and honoring the Global Privacy Control are their own control group.
Does it cover sensitive personal information? Yes, including the CPRA right to limit the use and disclosure of sensitive PI.
What if it is not for me? A 30-day money-back guarantee.
Do not miss a Do Not Sell link or an opt-out signal.
Every CCPA and CPRA obligation is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and be compliant this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
