# California Privacy Law Assessment (CCPA/CPRA)

> From $35K · Compliance & GRC · https://cisomarketplace.services/services/california-privacy-law-assessment

Comprehensive evaluation of your organization's compliance with California's privacy regulations, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Our assessment examines data handling practices, consumer rights processes, and disclosure requirements to identify compliance gaps and provide a detailed remediation roadmap.

## In scope

- CCPA/CPRA applicability assessment
- Personal information inventory
- Consumer rights implementation review
- Privacy notice evaluation
- Do Not Sell implementation assessment
- Sensitive personal information handling
- Data retention practices
- Service provider agreement review
- Employee data handling assessment
- Consumer request process evaluation
- Privacy policy review
- Risk assessment methodology

## Deliverables

- California privacy compliance report
- Applicability determination
- Data inventory and mapping
- Consumer rights procedure recommendations
- Notice requirements implementation plan
- Privacy disclosure updates
- Vendor management framework
- Data retention guidelines
- Implementation roadmap and timeline
- Compliance monitoring strategy

## Tiers

### Essential California Privacy Assessment: $35K

CCPA/CPRA applicability determination and gap assessment for up to 250 employees: personal information inventory of up to 15 systems, privacy notice and policy review, consumer request process check, up to 10 service provider agreements.

Limits: employees 250, vendors 10, frameworks 1

Includes:
- Up to 250 employees, up to 15 systems inventoried
- Applicability determination
- Privacy notice and policy review
- Review of up to 10 service provider agreements
- Compliance report and roadmap

Excludes:
- Drafting updated notices and procedures
- Consumer rights procedure build-out
- Data retention schedule
- Other privacy frameworks

### Comprehensive California Privacy Program: $60K

CCPA/CPRA assessment for up to 1,000 employees: data mapping of up to 40 systems, up to 25 service provider agreements, plus drafted privacy disclosures, consumer rights procedures, retention guidelines and vendor management framework.

Limits: employees 1000, vendors 25, frameworks 1

Includes:
- Up to 1,000 employees, up to 40 systems mapped
- Review of up to 25 service provider agreements
- Drafted notices and privacy disclosures
- Consumer rights request procedures
- Data retention guidelines and vendor framework

Excludes:
- Hands-on implementation in your systems
- Integration with other privacy frameworks
- Post-project compliance maintenance

### Enterprise California Compliance Framework: $95K

Advanced compliance program for complex organizations with custom implementation support, integration with other privacy frameworks, and ongoing compliance maintenance

Limits: vendors 50, frameworks 3

Excludes:
- Legal representation or regulator filings
- Privacy tooling licences

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=california-privacy-law-assessment