Description
Annual data mapping exercise to identify all personal information collected, sources, purposes, and third-party sharing.
Requirements
- Map all data collection points
- Identify all categories of PI collected
- Document data sharing with third parties
- Identify cross-border data transfers
- Update data inventory
Applicable To
Businesses collecting CA consumer data
Penalty Information
âš Inaccurate data mapping leads to inaccurate privacy disclosures.