--- title: CCPA Compliance Checklist - TrueVault --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login - Login - [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) - [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) [CCPA RESOURCES CENTER](https://www.truevault.com/learn/ccpa/?hsLang=en) › CCPA COMPLIANCE CHECKLIST # CCPA Compliance Checklist Table of Contents keyboard\_arrow\_right [Overview](https://www.truevault.com/ccpa-checklist?hsLang=en) [Data Mapping Checklist](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en) [Vendor Classification Checklist](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en) [Privacy Policy and Notices Checklist](https://www.truevault.com/ccpa-checklist/privacy-policy-and-notices?hsLang=en) [Request Processing Checklist](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en) [Staying Compliant Checklist](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en) - [Overview](https://www.truevault.com/ccpa-checklist?hsLang=en) - [The Five Major Steps to CCPA Compliance](https://www.truevault.com/ccpa-checklist?hsLang=en#five-steps-to-ccpa-compliance) - [Data Mapping Checklist](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en) - [Incoming Personal Information](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en#incoming-personal-information) - [Outgoing Personal Information](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en#outgoing-personal-information) - [Vendor Classification Checklist](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en) - [Steps for Classifying Individual Vendors](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en#classifying-individual-vendors) - [Privacy Policy and Notices Checklist](https://www.truevault.com/ccpa-checklist/privacy-policy-and-notices?hsLang=en) - [Request Processing Checklist](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en) - [Right to Know Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-know-requests) - [Right to Delete Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-delete-requests) - [Right to Opt Out Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-opt-out-requests) - [Staying Compliant Checklist](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en) - [Quarterly CCPA Maintenance](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en#quarterly-ccpa-maintenance) - [Annual CCPA Maintenance](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en#annual-ccpa-maintenance) Becoming CCPA compliant is a big project, but with the right tools and a clear action plan, it can be achieved in much less time. Here are the five major steps to becoming and staying compliant, along with separate checklists for completing each step. Read our [Complete CCPA Guide](https://safe.truevault.com/ccpa-guide?hsLang=en) for more detailed information about the California Consumer Privacy Act. ## The Five Major Steps to CCPA Compliance ### 1. Data Mapping The cornerstone of CCPA compliance. Businesses must perform an in-depth analysis of what personal data it collects, where it is stored, how it is used, and with whom it is shared. [View the Data Map checklist ›](https://safe.truevault.com/ccpa-checklist/data-mapping?hsLang=en) ### 2. Vendor Classification A critical part of any compliance strategy is determining which of a business’s vendors qualify as “service providers,” and are therefore exempt from some of the CCPA’s rules. [View the Vendor Classification checklist ›](https://safe.truevault.com/ccpa-checklist/vendor-classification?hsLang=en) ### 3. Privacy Policy & Notices Once you have a complete picture of how consumer data is collected and used, you can create a CCPA-compliant privacy policy and any additional required notices. [View the Privacy Policy checklist ›](https://safe.truevault.com/ccpa-checklist/privacy-policy-and-notices?hsLang=en) ### 4. Request Processing Every type of CCPA privacy request has its own rules and exceptions. Creating a plan in advance for responding to them will make the process more efficient, more uniform, and less prone to mistakes. [View the Privacy Requests checklist ›](https://safe.truevault.com/ccpa-checklist/request-processing?hsLang=en) ### 5. Staying Compliant Staying CCPA compliant is an ongoing process that requires quarterly and annual maintenance. Identify these tasks and schedule them ahead of time to minimize any disruptions. [View the Staying Compliant checklist ›](https://safe.truevault.com/ccpa-checklist/staying-compliant?hsLang=en) ## The Simplest Path to CCPA Compliance TrueVault Polaris automates every step of the process to help your business reach full CCPA compliance in a fraction of the time, without the worry of making costly mistakes. Contact our team today to learn more. [![Schedule Call](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/949d85da-b649-4822-b380-0922b22c3b60.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/949d85da-b649-4822-b380-0922b22c3b60) **Disclaimer:** This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions. ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2024 © All Rights Reserved.  [Privacy Policy](https://privacy.truevault.com/privacy-policy)  |  [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use?hsLang=en)  |  [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use?hsLang=en) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)