Training

What it requires

All individuals responsible for handling consumer inquiries about the business's information practices or the business's compliance with the CCPA must be informed of all of the requirements in the CCPA and these regulations, and of how to direct consumers to exercise their rights. A business that knows or reasonably should know that it, alone or in combination, buys, receives for the business's commercial purposes, sells, or shares for commercial purposes the personal information of 10,000,000 or more consumers in a calendar year owes more: under subdivision (b) it must establish, document, and comply with a training policy covering everyone who handles CCPA requests or the business's compliance with the CCPA. Subdivision (a) is a standard of knowledge that binds every business; subdivision (b) is a written policy a business above the threshold must be able to produce.

Regulation text

(a) All individuals responsible for handling consumer inquiries about the business's information practices or the business's compliance with the CCPA shall be informed of all of the requirements in the CCPA and these regulations and how to direct consumers to exercise their rights under the CCPA and these regulations. (b) A business that knows or reasonably should know that it, alone or in combination, buys, receives for the business's commercial purposes, sells, or shares for commercial purposes the personal information of 10,000,000 or more consumers in a calendar year shall establish, document, and comply with a training policy to ensure that all individuals responsible for handling consumer requests made under the CCPA or the business's compliance with the CCPA are informed of all the requirements in these regulations and the CCPA.

California Consumer Privacy Act / California Privacy Rights Act, § 7100Read the full section from California Privacy Protection Agency (CalPrivacy)