Training and Awareness Policy

This Training and Awareness Policy establishes a framework for educating employees, contractors, and other stakeholders about their responsibilities under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). It promotes a culture of privacy and data protection within the organization.

• Scope: Applies to all personnel and entities with access to consumer personal information (PI) or sensitive personal information (SPI).
• Training Requirements: Covers general privacy training, role-specific training, incident response, and vendor awareness.
• Frequency: Includes initial training within 30 days of hire, annual refresher courses, and ad hoc sessions for regulatory updates.
• Monitoring: Tracks training completion, evaluates effectiveness, and addresses non-compliance through corrective measures.

This policy ensures compliance with CCPA/CPRA by enhancing awareness and fostering accountability across the organization.