Privacy Gap Analysis
A focused, faster alternative to a full PIA. The gap analysis targets your highest-risk areas the places where a DCC audit or CCPA complaint is most likely to surface a problem and gives you a ranked list of findings with clear remediation steps.
Many operators use a gap analysis as a starting point before commissioning a full PIA. It's also useful after a system change, staff turnover, or a new platform launch.
What the analysis covers
-
CCPA notice obligations at every customer touchpoint
-
Consumer rights process: do you have one, and does it work?
-
ID scan and customer data retention practices
-
Metrc access register: who has credentials, and are former employees still on the list?
-
Staff data handling practices and training status
-
Quick-scan of key vendor relationships
What you receive
-
Written gap report with risk-rated findings (High / Medium / Low)
-
Quick-win action list: fixes you can implement immediately
-
20-minute debrief call