California Consumer Protection Act (CCPA)

The California Consumer Privacy Act (CCPA), a bill meant to enhance privacy rights and consumer protection for residents of California, United States, was passed on 28 June 2018, on the heels of the European Union’s General Data Protection Regulation (GDPR) enactment in May 2018. CCPA takes effect on January 1, 2020, and imposes significant penalties on those that misuse and resell consumers’ private information. CCPA is the first of many State data protection laws, with Federal laws following. Organisations should not treat these regulations as a one-off compliance project, rather as a mandatory regulatory opportunity to create an organisational framework to pro-actively address data management, not only data privacy.

Data management, including data lineage, play a vital role in CCPA by cataloguing and modelling where data exists within an organisation as well as where it flows. Allowing for full transparency on what data is collected, where it is stored, who has access to it and how it is used. Solidatus helps to build an organisational digital dashboard providing understanding to management of the importance of personal data and transparency to the regulator, should a proof of compliance be required.

Solidatus for CCPA

By using Solidatus, an organisation gains the ability to receive valuable insight into its data landscape. The tool enables an organisation to discover, document, visualise and analyse its data, including personal data to understand what data they hold, what type of data they have and how it moves through their systems.

The Solidatus Data Privacy Module provides a digitised version of the California Consumer Privacy Act (CCPA) that enables an organisation to directly link regulatory clauses against their processes, the people that interact with them and the data that is generated and utilised by them. The Solidatus Data Privacy Module also allows organisations to track changes in the regulation over time to automatically assess impact of regulatory change.  It also allows businesses to create a common taxonomy of several Data Privacy Regulations such as GDPR, CCPA, LGPD, etc to allow for simplification of implementation and reuse of regulatory work product. Organisations can additionally compare privacy regulations across several dimensions including, scope, jurisdiction.

Company-wide collaboration

Through its automated and collaborative crowdsourcing model, Solidatus allows for quick and effective enterprise-wide identification of where personal information is held. A clear view of exactly where data is and an understanding of how it’s being used in business and IT processes are accessible and shareable with all teams across the organisation.

Visualise and map data

Data flow can be clearly mapped out to visualise each contact point and ownership can then be assigned. Once an organisation has this knowledge, they can quickly and confidently fulfil customers ‘Right to know’, ‘Right to deletion’, ‘Right to access’ and ‘Right to opt-out’ requests.

Proactive approach to compliance

Solidatus enables companies to significantly reduce compliance costs by taking a proactive approach to not only CCPA but all personal data regulations.  By clearly documenting and auditing their data landscape, privacy impact assessments become instant.

Demonstrate PIA risk

Solidatus can demonstrate to the regulator how and when Privacy Impact Assessments (PIA) were conducted and prove how information is collected, stored, used and deleted and who has access to it. It also clearly shows that data privacy is a key consideration for future change.

Solidatus CCPA Model

MULTI award-winning data lineaGE SOLUTION

Simple to use

The intuitive and simple web interface is easy to use and requires little or no training.

Easy access

Solidatus is a browser based application and it can be up and running in the cloud in minutes.

Rapidly build lineage

Import and export data between Solidatus and from other systems using the data connectors.

u

Identify MISSING DATA

Immediately start modelling and easily identify where additional discovery is required.

Accelerate discovery

Accelerate discovery by sharing parts of the models to identified system experts to fill in the detail.

Create & share views

Easily share with management and colleagues for immediate feedback and approval.

Solidatus is used by the world’s largest financial institutions for

CCAR

 

GDPR

 

AML

 

Explicit customer rights established by CCPA

Single incident involving 10,000 consumers, maxium penalty

Becomes law 1st January 2020

Accelerate your CCPA Compliance

An intuitive, simple to use web-based application that gives businesses the ability to rapidly map and visualise their data landscape.

Solidatus is a member of the EDM Council.
Solidatus is a member of the EDM Council

Meet Solidatus


Features
Partners
About