In 2019, months before the California Consumer Privacy Act was set to take effect, Chris Cleveland started to figure out how much data his dealership group, Galpin Motors, collected about its customers.
Cleveland, Galpin's compliance director, spent months mapping out consumer data to prepare for the new law, which gives consumers rights to know the data businesses collect about them and to limit how businesses can use it.
During his research, Cleveland realized that notifying vendors of a consumer's request under the law, figuring out which vendors had access to an individual customer's data and understanding what data vendors even kept was practically a full-time job.