Form

Welcome to Orrick, Herrington & Sutcliffe’s CCPA Readiness Assessment Tool.



This Tool will guide you through a series of questions relating to the California Consumer Privacy Act of 2018 (the "CCPA"), which is a new sweeping privacy law that becomes operative on January 1, 2020. The questions in the tool are designed to obtain insight into your organization’s readiness for compliance with the CCPA by focusing on several key requirements of the new law.

The questions are structured with either “Yes/No” responses or “Select all of the following that apply” responses. The questions also include a “Not Sure” response. If you are not certain of the answer, you should select “Not Sure” as your response. If you see a lightbulb to the right of a question, please click on the lightbulb for additional information that may help you to answer the question.



The questions in the Tool are not exhaustive and additional considerations may be relevant in determining the complete picture of your organization’s readiness for compliance with the CCPA. In addition, although our CCPA Team seeks to update this Tool in a timely manner in the event of any amendments to the law or the release of any regulatory guidance, it is possible that some of the compliance considerations addressed by this Tool may change over time. As a result, we recommend discussing any insights gained from completing the Tool’s assessment questionnaire or reviewing the associated report with legal and/or other counsel.



Please note that nothing contained in this website, including Orrick's CCPA Readiness Assessment Tool and the assessment questionnaire as well as the documents produced by it (collectively, the "Tool"), is to be considered as the rendering of legal or business advice, either generally or in connection with any specific issue or case. These materials are intended for general information and educational purpose only. You are responsible for obtaining legal or business advice from your own lawyer or other professional and should not rely on the Tool without seeking such advice. In addition, neither the availability, operation, transmission, receipt nor use of the Tool is intended to create, nor does it create, an attorney-client relationship or any other relationship. Any information provided in connection with the use of the Tool is not privileged or confidential. Please contact Orrick’s CCPA team at CCPA@orrick.com if you would like to learn more about CCPA compliance or to discuss entering a formal attorney-client relationship with Orrick.



The Tool’s assessment questionnaire consists of 5 sections in total: 



• Section A – Scope of the CCPA

• Section B – Notice to California Residents

• Section C – CCPA California Resident Rights

• Section D – Vendor Management and Contracting
• Section E – Additional Considerations



Based on your responses, you may not be prompted to answer some of the questions in the questionnaire.



Please click the “Next” button below to navigate to the next page and begin the assessment. If you cannot see the "Next" or "Previous" buttons, please check to make sure that your browser's zoom is set to 100%.

Section A - Scope of the CCPA (Part 1)

The CCPA regulates the collection and use of “personal information” by a qualifying “business.” The following questions are designed to determine whether your organization (referred to as “you” or “your” throughout this Tool) meets the definition of a qualifying “business” subject to the CCPA.

Section A - Scope of the CCPA (Part 3)

Please check all of the following that apply to your collection and use of personal information:

“Personal information” is any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. For a list of examples of personal information, please click the lightbulb. 

Section B – Notice to California Residents

The CCPA imposes new disclosure requirements for organizations subject to the CCPA designed to determine your readiness to comply with these new disclosure obligations.

Section C – CCPA California Resident’s Rights

The CCPA introduces and enhances several rights for California residents relating to the following questions are designed to determine your readiness to comply with your obligations relating to these CCPA California resident rights.

CCPA California Residence Rights

Right to Knowledge and Access

Right to Non-Discrimination

Consumer choice and the right to opt out

Right to deletion

Section D – Vendor Management and Contracting

The CCPA introduces new vendor management and third-party contracting considerations. The following questions are designed to determine your readiness to address these considerations.

SECTION E – Additional Considerations

The following questions focus on your existing privacy and data security practices and are designed to determine whether you may be able to leverage existing programs or frameworks to address CCPA obligations.