Submit annual cybersecurity audit completion certification
Under California Consumer Privacy Act of 2018
Overview
Submit annual written cybersecurity audit completion certification to the CPPA by April 1 following a year in which an audit was required, signed by a knowledgeable, responsible executive. Imported research notes (check before approving): • Duty holder: regulated entity (Business subject to the CCPA) • Goes to: regulator (California Privacy Protection Agency) • Timing in the source: "no later than April 1 following any year"
Important
This requirement was extracted from the source document. Applicability depends on your organization's circumstances. Review the official source and obtain professional advice where appropriate.
Key information
- Policy
- CCPA
- Jurisdiction
- California
- Obligation type
- Filing
- Frequency
- Annually
- Suggested owner
- Compliance Officer
- Policy categories
- Data Protection, Cybersecurity, Privacy, Compliance
- Source
- § 7124, § 7124, page 82
- Suggested reminders
- 30 days before · 7 days before · 1 day before
- Policy last reviewed
- Oct 29, 2026
Details
Who this may apply to
Businesses required to complete cybersecurity audits.
When this applies
Annually · Every 1 April
From the source
“Each calendar year that a business is required to complete a cybersecurity audit pursuant to this Article, it must submit to the Agency a written certification that the business completed the cybersecurity audit as required by this Article. (b) The business must submit the certification”
§ 7124, § 7124, page 82
Other obligations in this policy
Explore other identified requirements from the same source policy.
Remindash provides this information to help organizations identify and track potential obligations. Applicability can depend on your organization's circumstances. Review official sources and obtain professional advice where appropriate.