Manage Privacy Operations
Run structured ROPA, DPIA and PIA workflows and maintain visibility over processing activities.
Privacy / North America
Put consumer privacy rights into practice.
Section 1 — About CCPA
The California Privacy Rights Act (CPRA) amended and expanded the California Consumer Privacy Act (CCPA), strengthening privacy rights for California residents and adding new obligations for businesses. The CPRA amendments took effect on January 1, 2023.
Key rights include the ability to know, delete and correct personal information, opt out of its sale or sharing, and limit certain uses and disclosures of sensitive personal information.
For businesses, compliance means keeping privacy notices, consumer requests, data practices and supporting records organized and demonstrable.
Section 2 — CCPA with Controllo
Controllo brings privacy operations, consumer requests, risk and compliance evidence into one connected workspace.
Run structured ROPA, DPIA and PIA workflows and maintain visibility over processing activities.
Create or upload data-flow diagrams, connect databases and tag PII obligations within your data-store schema.
Create purposes, configure branded consent experiences and maintain user preference and consent history where applicable.
Manage requests, withdrawals and grievances with clear status tracking and audit logs.
Assess privacy risks using Controllo’s NIST Privacy Framework-aligned approach and connect them with applicable requirements.
Maintain privacy documentation and supporting evidence alongside the controls they help demonstrate.
Analyze implementation descriptions, policies and evidence to identify potential compliance gaps and receive detailed recommendations.
Section 3 — Why Controllo for CCPA?
Connect data flows, requests, preferences, risks and documentation.
Keep requests and related activity visible from initiation through resolution.
Replace fragmented spreadsheets and repositories with structured privacy workflows.
Use Secura AI to surface incomplete implementation or supporting documentation before review.
Manage privacy rights, risk and evidence from one connected platform.