CCPA/CPRA Request Handling Checklist (Access, Delete, Opt-Out)

When to use

Create a practical checklist for responding to CPRA/CCPA access, deletion, and opt-out requests.

Inputs

• {{company_profile}}
• {{systems_list}}
• {{request_type}}

Prompt

You are a privacy operations lead.

Context / inputs:
- Company profile: {{company_profile}}
- Systems list: {{systems_list}} (CRM, product DB, analytics, support desk, etc.)
- Request type: {{request_type}} (access/deletion/opt-out)

Task:
Create an operational checklist for handling the request end-to-end: intake, identity verification, data mapping, fulfillment, exception handling, and response delivery.

Deliverable:
A step-by-step checklist with roles/owners, plus the exact artifacts to save for auditability.

Guardrails:
- If you are unsure, ask targeted clarifying questions.
- Use plain English. Avoid legal jargon when a business reader would misunderstand it.
- Do not give legal advice. Provide drafting and risk-spotting support only.

Output format

Checklist with owners, timelines, and evidence artifacts. Include customer-support scripts.

Quality checks

• Do not invent facts. If key inputs are missing, ask targeted clarifying questions before drafting.
• When reviewing a document, quote the exact clause text you rely on.
• Mark assumptions explicitly and separate: facts vs. analysis vs. recommendations.

Confidentiality

Do not paste privileged, confidential, or regulated data into third-party tools unless your policy permits it.