CCPA and Delete Act checklists
Printable checklists for CCPA businesses and, where relevant, data brokers under the Delete Act. Each item cites the California Civil Code or Title 11 of the California Code of Regulations. As of 25 August 2026.
Sections 1 to 6 cover CCPA scope, collection and security duties, request methods, consumer rights, opt-out preference signals, and exemptions. Sections 7 to 9 cover the 2026 rules on risk assessments, cybersecurity audits, and automated decisionmaking technology. Sections 10 to 12 apply only if you are a data broker: registration, DROP processing from 1 August 2026, and independent DROP audits from 1 January 2028.
Use the lists against a real inventory of personal information, systems and third parties. Mark N/A only where the cited rule does not apply, and record why. This is a workplan, not a certificate of compliance and not legal advice.
Read the full article: What is CalPrivacy? A plain-English explanation.