Description
Businesses subject to CCPA risk assessment requirements must begin compliance with new regulations for privacy risk assessments. These assessments must evaluate the benefits and risks of processing personal information for specified purposes, including automated decision-making technology.
Requirements
- Identify processing activities requiring risk assessments
- Evaluate benefits vs risks of data processing
- Assess automated decision-making technology risks
- Document risk assessment findings
- Implement mitigations for identified risks
Applicable To
Businesses meeting CCPA thresholdsOrganizations using automated decision-makingBusinesses engaged in high-risk processing
Penalty Information
âš $2,500-$7,500 per violation.