The law requires that all individuals responsible for handling consumer inquiries about the business’ privacy practices or CPRA compliance must be informed of all CPRA requirements and implementing regulations, as well as how to direct consumers to exercise their rights under this law.

As such, all businesses covered by the CPRA must identify any employee who may receive an inquiry from a consumer regarding the business’ privacy practices and train those employees.

In layman’s terms, everyone who’s either responsible or could be responsible for managing or handling personal information of California residents in accordance with these privacy laws — or anyone who might be responsible for interfacing with the public — should complete the training.

To comply with the law, training must include:

• Consumer rights under the CPRA;
• How consumers can exercise those rights; and
• The business’ responsibility in responding to those inquiries/rights.

• CPRA provisions will be enforced by the California Privacy Protection Agency (CPPA). Businesses covered by the CPRA should make sure they’re complying with the consumer rights provided by these laws and that their employees who may receive an inquiry are properly trained.