CaliforniaRequired by lawCal. Civ. Code 1798.100-1798.199.100

California consumer privacy (CCPA/CPRA)

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 6 details that are specific to your organisation.

Length
35 min
Lessons
7 lessons
Frequency
At hire for in-scope roles + annually
Last reviewed
8 Oct 2026
Case practice
What would you do?

Support agent gets "delete everything you have on me" in chat

Try it: this is one of 13 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 7 lessons, about 35 minutes
  • 2 video slots (you add the videos)
  • Accordion, flashcards, scenario, tabs and quizzes
  • 12-question final check, 80% to pass

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 9 slides
  • Quiz, poll, word cloud slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Built to the law Each objective names the requirement it comes from and the lesson that covers it.

IDObjectiveRequired byWhere it's covered
TO 1.0Achieve ≥ 80% on the final assessment-Whole course
LO 68.1.1Explain who the CCPA protects, who it covers and who enforces it1798.140(d); 1798.199.10Lesson 1: Why the rule exists
LO 68.2.1Identify personal information and sensitive personal information1798.140(v), (ae)Lesson 2: What's covered
LO 68.3.1Describe consumer rights: know, delete, correct, opt out of sale/sharing, limit SPI, non-discrimination1798.100-1798.125Lesson 3: Rights & timelines
LO 68.4.1Handle a consumer request within required timelines + your info1798.130; §§7020-7028Lesson 4: Red flags & duties
LO 68.5.1Honour opt-out signals and avoid dark patterns§7004, §7025Lesson 5: Case practice
LO 68.6.1Direct consumers to the right request method and escalate + your info§7100Lesson 6: Escalate correctly

Your part: what a template can't do for you

  • Your workplace details: fill in the 6 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

7 lessons, about 35 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

Why the rule exists

2 pages

5 min
Before you beginNoteList
Who's watching your data?Key factAccordionQuizVideo
2

What's covered

2 pages

5 min
DefinitionsTabs
TermsFlashcardsMatching quiz
3

Rights & timelines

3 pages

8 min
RightsFlashcards
DeadlinesTable
Sort itSorting activityQuiz
4

Red flags & duties

2 pages

5 min
Dark patterns & opt-outsAccordionGallery
Your dutiesChecklistMulti-select quiz
5

Case practice

2 pages

5 min
Scenario - the support chatScenario
Scenario - the marketing pixelScenario
6

Escalate correctly

1 page

2 min
PracticeYour infoYour infoYour infoQuiz
7

Final assessment

Assessment

5 min
Final check12 questions80% to passCompletion page

Live deck and surveys

9 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

TitleTitle + agenda
PollHave you ever received a privacy request?
QuizDeadline to respond to a request to know?
QuizIs a GPC browser signal a valid opt-out?
Content · customiseOur request workflow
Word cloudWhere do privacy requests arrive here?
QuizDo employees have CCPA rights?
Q&AAsk the trainer anything
Closing · customiseWho to contact, and where to find more
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Through which channels have consumers made privacy requests to you? multiple choice
  6. How confident are you explaining the difference between 'delete' and 'opt out of sale/sharing'? 1-5 scale
  7. Which request type is most confusing to handle? short text
  8. Our tools make it easy to honour privacy requests on time. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find our privacy request system and privacy team contact? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

6 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • Privacy request system{{PRIVACY_REQUEST_SYSTEM}}
  • Request methods{{REQUEST_METHODS}}
  • Verification procedure{{VERIFICATION_PROCEDURE}}
  • Privacy team contact{{PRIVACY_TEAM_CONTACT}}
  • Privacy policy link{{PRIVACY_POLICY_LINK}}
  • LMS or record system{{LMS_OR_RECORD_SYSTEM}}

FAQ

Common questions

Can I run California consumer privacy (CCPA/CPRA) training online?

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check Cal. Civ. Code 1798.100-1798.199.100 or ask your own counsel.

How often is this training needed?

At hire for in-scope roles + annually; update when regs change.

Who needs this training?

Customer service, privacy request handlers, marketing, HR (employee data is in scope), product and data teams at businesses covered by the CCPA.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in Cal. Civ. Code 1798.100-1798.199.100.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.