--- title: "CCPA Checklist: Staying Compliant - TrueVault" --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login - Login - [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) - [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) [CCPA RESOURCES CENTER](https://www.truevault.com/learn/ccpa?hsLang=en) › CCPA COMPLIANCE CHECKLIST # CCPA Compliance: Staying Compliant Checklist Table of Contents keyboard\_arrow\_right [Overview](https://www.truevault.com/ccpa-checklist?hsLang=en) [Data Mapping Checklist](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en) [Vendor Classification Checklist](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en) [Privacy Policy and Notices Checklist](https://www.truevault.com/ccpa-checklist/privacy-policy-and-notices?hsLang=en) [Request Processing Checklist](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en) [Staying Compliant Checklist](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en) - [Overview](https://www.truevault.com/ccpa-checklist?hsLang=en) - [The Five Major Steps to CCPA Compliance](https://www.truevault.com/ccpa-checklist?hsLang=en#five-steps-to-ccpa-compliance) - [Data Mapping Checklist](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en) - [Incoming Personal Information](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en#incoming-personal-information) - [Outgoing Personal Information](https://www.truevault.com/ccpa-checklist/data-mapping?hsLang=en#outgoing-personal-information) - [Vendor Classification Checklist](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en) - [Steps for Classifying Individual Vendors](https://www.truevault.com/ccpa-checklist/vendor-classification?hsLang=en#classifying-individual-vendors) - [Privacy Policy and Notices Checklist](https://www.truevault.com/ccpa-checklist/privacy-policy-and-notices?hsLang=en) - [Request Processing Checklist](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en) - [Right to Know Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-know-requests) - [Right to Delete Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-delete-requests) - [Right to Opt Out Requests](https://www.truevault.com/ccpa-checklist/request-processing?hsLang=en#right-to-opt-out-requests) - [Staying Compliant Checklist](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en) - [Quarterly CCPA Maintenance](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en#quarterly-ccpa-maintenance) - [Annual CCPA Maintenance](https://www.truevault.com/ccpa-checklist/staying-compliant?hsLang=en#annual-ccpa-maintenance) ## Staying CCPA Compliant Though most of the work takes place at the front end, it is important for businesses to keep their CCPA compliance up to date as time passes. Besides responding to privacy requests as they come in, this means performing a few maintenance tasks on a quarterly and annual basis. ### Quarterly CCPA Maintenance - Check privacy inbox for outstanding consumer requests It’s also a good idea to review how long it is taking for staff to respond to requests. - Make sure all questions and concerns from the privacy inbox have been answered Even if they are not formal privacy requests, these are messages that should still be answered. - Confirm business is complying with past opt-out requests Businesses must wait at least 12 months before asking a consumer to opt in again. - Ensure that new employees handling privacy requests have received CCPA training The [Complete CCPA Guide](https://safe.truevault.com/ccpa-guide?hsLang=en) is a great introduction to the data privacy law. - Add or remove vendors from the data map This is likely the most difficult task. You must review contracts with any new vendors to determine whether they qualify as [CCPA service providers](https://safe.truevault.com/ccpa-guide/what-is-the-ccpa#what-is-a-service-provider). ### Annual CCPA Maintenance - Review data map and make any necessary changes Your business’s data practices will likely change over time. At least once a year, make sure the data map is still accurate. - Update privacy policy to reflect changes to data map The CCPA requires businesses to review their privacy policy annually. If the data map is kept up to date, this should be a simple process. - Point-of-Collection Audit Check whether you are collecting personal information at any new points. - Review request-handling instructions Make sure requests are being handled in a compliant manner. Also look for any areas that can be improved. - Refresh privacy documents as needed Service providers’ data privacy agreements (DPAs) may have been updated. Make sure you have the most current versions on file. - Check for any changes to the data privacy law and compliance landscape Subscribe to a data privacy newsletter for the latest developments with the CCPA and other laws. ### Streamlined CCPA Maintenance Onboarding new vendors and staying up to date on changes to privacy laws can be time-consuming. With TrueVault, these maintenance tasks are easy to cross off the list so you can get back to your regular job. Our CCPA experts stay current on the latest developments in the law as well as changes to vendors’ data privacy agreements, and integrate these changes into our compliance automation tools. Contact our team to learn how TrueVault can help your business get CCPA compliant and stay that way. [![Schedule Call](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/949d85da-b649-4822-b380-0922b22c3b60.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/949d85da-b649-4822-b380-0922b22c3b60) **Disclaimer:** This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions. ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2024 © All Rights Reserved.  [Privacy Policy](https://privacy.truevault.com/privacy-policy)  |  [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use?hsLang=en)  |  [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use?hsLang=en) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)