← CCPA/CPRA · Business obligations
1798.130(a)(6) & Regs 7100 — Training for staff who handle privacy inquiries
medium
training
Requirement
All individuals responsible for handling consumer inquiries about the business's privacy practices or CCPA compliance are informed of the requirements and of how to direct consumers to exercise their rights.
What the engine looks for
Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.
Required element 1 — any one of
trainingtrainedinformed
Required element 2 — any one of
privacy requestsconsumer requestsprivacy inquiriesconsumer inquiriesccpasupport staffcustomer serviceprivacy team
Supporting terms — specificity signals
1798.130(a)(6)regs 7100annual…
Equivalent controls elsewhere
Matched on shared topics. Satisfying this control usually moves these too.
| Framework | Control | Title | Shared topics |
|---|---|---|---|
| SOC 2 | CC1.1 | Commitment to integrity and ethical values | training |
| SOC 2 | CC1.4 | Competence of personnel | training |
| SOC 2 | CC2.2 | Internal communication of responsibilities | training |
| ISO 27001 | A.6.3 | Information security awareness, education and training | training |
| PCI DSS 4.0.1 | 12.6 | Security awareness programme | training |
| GLBA | 314.4(e) | Security awareness training and qualified security personnel | training |
| NIST CSF 2.0 | PR.AT-01 | Personnel are provided awareness and training | training |
| NDPA 2023 | GAID Art.30 | Privacy training and internal sensitisation (GAID 2025) | training |