ObligationCalifornia

Complete transitional assessment for pre-2026 ongoing processing

Under California Consumer Privacy Act of 2018

Data ProtectionCybersecurityPrivacyComplianceOne-timePrivacy Officer
Remindash intelligence

Overview

For covered processing initiated before Jan 1 2026 and continuing after that date, complete and document risk assessment by Dec 31 2027. Imported research notes (check before approving): • Duty holder: regulated entity (Business subject to the CCPA) • Timing in the source: "no later than December 31, 2027"

Important

This requirement was extracted from the source document. Applicability depends on your organization's circumstances. Review the official source and obtain professional advice where appropriate.

Key information

Policy
CCPA
Jurisdiction
California
Obligation type
Assessment
Frequency
One-time
Suggested owner
Privacy Officer
Policy categories
Data Protection, Cybersecurity, Privacy, Compliance
Source
§ 7155(b), § 7155(b), page 89
Suggested reminders
30 days before · 7 days before · 1 day before
Policy last reviewed
Oct 29, 2026
Requirement details

Details

Who this may apply to

Businesses with §7150(b) covered processing begun before Jan 1 2026 and continuing after it.

When this applies

One-time · 31 December 2027

From the source

Source material
“no later than December 31, 2027. The business must comply with the submission requirements set forth in section 7157, subsection (a)(1). (c) A business must retain its risk assessments, including original and updated versions, for as long as the processing continues or for five”

§ 7155(b), § 7155(b), page 89

Other obligations in this policy

Explore other identified requirements from the same source policy.

View all 10

Remindash provides this information to help organizations identify and track potential obligations. Applicability can depend on your organization's circumstances. Review official sources and obtain professional advice where appropriate.