The first step for compliance with privacy regulation is to determine it applicability to the company. Once the applicable data privacy and protection laws are known, the next step is to determine the tools and processes needed to achieve and maintain compliance.
There are many tools available to assist you, among them:

• Policies to set organizational rules and guidelines 
• Procedures that operationalize your policies 
• Training and awareness to make the policies and procedures understandable for your workforce 
• Technology tools that build privacy into the business process
• Monitoring, which provides necessary oversight to keep compliance on track 

One thing all these tools have in common is the need for documentation. Documentation frames all of these tools by communicating, describing and explaining the various paths towards compliance.

Data privacy and protection laws set your obligations when processing personal data and then demand accountability for meeting those obligations. In the CCPA, customer consent and access to personal data a company has on them is a pivotal, central point upon which all other principles enshrined in the legislation rest. The CCPA explicitly describes accountability as the responsibility to demonstrate compliance. The way to demonstrate this compliance, and thereby be accountable, is through proper, well-maintained documentation.

Some aspect to explore are : 

• The link between accountability, evidence and documentation   
• List of key documentation, grouped by category  
• Considerations when determining your Key Documentation Hierarchy  
• Ideas for managing Compliance Documentation
• Regular audits and dry runs of compliance scenarios to ensure evergreening of the process.

Privathy provides training and workshops for guiding on the right balance of compliance and practicality. 

You can find out more by contacting us using our contact form listed here