If your company processes personal data connected with California, clear responsibilities and data flows matter. Qiata helps you organise file sharing deliberately and integrate it into your existing privacy processes.
The California Consumer Privacy Act protects the rights of California residents in relation to businesses within its scope. The California Privacy Rights Act expanded the CCPA. Rights include access, deletion and correction, as well as rules on selling data and sharing it for cross-context behavioural advertising. Whether your company is covered depends on the specific scope of application.
Address transfers to the intended people. For shared projects, include participants through TeamTransfer and control their available actions through permissions. Sharing stays within the intended workflow.
Qiata can run on your own infrastructure. You control operation of the central file storage and can document data flows to internal teams and external partners within your organisation.
A transfer combines recipients, a subject and a message with the shared files. Available transfer activity helps answer questions about which documents were exchanged through that task.
Hand over customer documents to a selected partner.
The responsible team provides selected documents for a defined business task. Recipients and purpose are known; available protection options limit access. The contractual classification of the partner is handled within the company.
01Identify required documents and recipients
02Share files through an associated transfer
03Handle requests and further processing within the privacy process
TECHNOLOGY AND ORGANISATION
What your use case involves.
Scope and data roles
Clarify which data and business processes are covered and the roles of the companies involved. Agreements with service providers also belong in the assessment.
Requests from individuals
Define responsibilities for identity checks, research and responses. Traceable file sharing can support this process; decisions about a request are made within the company.
Sharing and retention
Assign permitted purposes, recipients and retention rules to each process. Include the further use of downloaded files.
Frequently asked questions about CCPA and Qiata.
Does local operation replace an assessment of the CCPA?
Local operation describes how you deploy Qiata. The legal assessment depends on your company, the data concerned and the actual processing activities.
Does Qiata handle all consumer rights requests?
Qiata supports file sharing within your processes. You organise responsibilities, identity checks and access, correction or deletion requests across your company's entire data processing activities.