Skip to main content
CCPA Compliance Checklist

CCPA Compliance Checklist

Use this CCPA compliance checklist to review website privacy disclosures, tracking technologies, cookies, consumer rights mechanisms, and third-party data sharing practices relevant to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

  • Review key CCPA and CPRA website compliance checkpoints
  • Download the checklist in Excel or PDF format
  • Use it alongside Auditzo's website compliance audit tools
Download Excel Checklist Download PDF

Want to review how your website behaves during real visits? Run a website compliance check.

Structured CCPA compliance review

Designed to help teams review tracking technologies, disclosures, and consumer rights controls under California privacy laws.

Practical checklist controls for CCPA & CPRA

Useful for privacy teams, founders, agencies, and legal consultants reviewing California privacy exposure

Available in Excel and PDF format

Use as a working document for internal review, client audits, or remediation planning

Who this CCPA compliance checklist is for

This CCPA compliance checklist is designed for organizations that collect personal information from California residents through websites, applications, or digital services. It helps teams review website behavior, privacy disclosures, cookies, tracking technologies, and consumer rights workflows relevant to CCPA and CPRA requirements.

Business & Website Owners
  • SaaS companies with California users
  • E-commerce websites selling to California residents
  • Marketing teams using analytics and advertising platforms
Professionals & Teams
  • Privacy and legal teams preparing compliance reviews
  • Consultants auditing client websites
  • Founders expanding products into the US market

CCPA compliance checklist preview

Below is a preview of the types of compliance checkpoints included in the CCPA checklist. The downloadable Excel and PDF versions include a full structured list of review controls used during privacy and compliance assessments.

CCPA compliance checklist preview showing privacy compliance review controls

Preview of CCPA compliance review controls covering disclosures, cookies, and consumer rights mechanisms.

Checklist Area Sample Review Questions
Privacy NoticeDoes the website provide a CCPA-compliant privacy notice explaining categories of personal information collected?
Data Collection DisclosureAre categories of collected personal information clearly disclosed?
Do Not Sell / ShareIs a clear "Do Not Sell or Share My Personal Information" mechanism available if required?
Cookies and TrackersDo tracking technologies collect identifiers from California visitors?
Consumer Rights RequestsCan users submit access or deletion requests as required under CCPA?
Third-Party SharingAre third-party data sharing relationships disclosed?
Download Excel Checklist Download PDF

What a CCPA compliance checklist should cover

A useful CCPA compliance checklist should go beyond checking whether a privacy policy exists. It should help teams review consumer rights mechanisms, tracking disclosures, cookies, third-party data sharing, and whether website behavior appears consistent with what the privacy notice describes.

Privacy disclosures and notices

Review whether categories of personal information collected are clearly disclosed in the privacy notice.

Do Not Sell or Share mechanisms

Review whether opt-out controls are available, clearly labeled, and functional for California visitors.

Cookies and tracking technologies

Review whether cookies, pixels, and tracking scripts collecting California visitor data are disclosed and controlled.

Consumer rights request workflows

Review whether access, deletion, and correction request processes are in place and accessible to users.

Use the checklist with Auditzo compliance tools

A checklist helps teams organize manual compliance reviews. For deeper visibility into website behavior, combine this checklist with Auditzo tools such as the website compliance checker, the cookie audit tool, or the GDPR cookie checker.

Website compliance checker

Review cookies, tracking scripts, and website behavior during real visits.

Run compliance check
Cookie audit tool

Review cookie consent behavior and tracking technologies.

Run cookie audit
GDPR cookie checker

Review cookies and consent behavior under GDPR requirements.

Use cookie checker

Need more than a checklist?

Use Auditzo's live tools to review website tracking behavior, cookies, and third-party request activity beyond manual review.

Use website compliance checker

Use the checklist first, then review live website behavior

Start with the CCPA checklist for structured manual review, then analyze your live website for clearer visibility into cookies, tracking scripts, and third-party request behavior.

Use Website Compliance Checker Run Cookie Audit Tool
Technical website evidence

Need clearer evidence of what your website is doing?

Start with an automated website scan or discuss a human-reviewed privacy, tracking or accessibility audit.

Run Free Scan Discuss Audit Scope