Record of Processing Activities (Art. 30 GDPR · PDPA ม.39) → California (CCPA/CPRA) 🇺🇸
CCPA 2018 + CPRA 2020 · California Privacy Protection Agency (CPPA)
- 55,000-185,000 บาท
- Starting Fee
- Transparent pricing
- 14-45 working days
- Turnaround
- Typical delivery
- 168
- Destinations
- Apostille + embassy chain
- 12+
- Years Experience
- Since 2013
- 4.9
- Client Rating
- From verified cases
- 6
- Steps
- Documented workflow
ที่มา / Source: NYC Online Translation — Verified by MFA Thailand, Lawyers Council of Thailand & embassy registrations.
Record of Processing Activities (Art. 30 GDPR · PDPA ม.39) for California (CCPA/CPRA) must align with CCPA 2018 + CPRA 2020 — supervised by California Privacy Protection Agency (CPPA) with max fines of $7,500 per intentional violation.
Partner network — Bird & Bird, OneTrust, BSI, DNV — for ISO certification, cross-border SCC, EU representative service.
California (CCPA/CPRA) legal regime: CCPA 2018 + CPRA 2020 — enforced by California Privacy Protection Agency (CPPA) with max fines of $7,500 per intentional violation. No universal breach window but $100-$750/consumer statutory damages + GPC signal must be honoured.
Breach notification: No fixed window — recommend best-practice 48-72 hours.
End-to-end: Record of Processing Activities (Art. 30 GDPR · PDPA ม.39) → mapping → control implementation → California Privacy Protection Agency (CPPA) registration (where applicable) → ongoing audit.
72-hour breach response SLA — 38 incidents handled in 2024-2025 (ransomware, vendor breach, insider) — every case notified PDPC/DPA/customer within window.
Coverage
How it works — Record of Processing Activities (Art. 30 GDPR · PDPA ม.39) → California (CCPA/CPRA) 🇺🇸
- Map CCPA 2018 + CPRA 2020
Compliance plan aligned with California Privacy Protection Agency (CPPA).
- Prepare Record of Processing Activities (Art. 30 GDPR · PDPA ม.39)
14-45 working days at 55,000-185,000 บาท.
- Transfer mechanism
SCC + BCR + TIA + adequacy assessment as required.
- Local representative
Local DPO or representative per destination law.
- DPA registration
Notification/filing with California Privacy Protection Agency (CPPA) where required.
- Ongoing monitoring
Quarterly review + annual audit + breach drill + DSAR queue monitoring.
Frequently asked questions
Which law applies in California (CCPA/CPRA)?
CCPA 2018 + CPRA 2020
Supervisory authority?
California Privacy Protection Agency (CPPA)
Maximum fine?
$7,500 per intentional violation
Breach window?
No fixed window — best-practice 48-72 hours.
Market-specific caution?
No universal breach window but $100-$750/consumer statutory damages + GPC signal must be honoured.
Local representative required?
Depends on scope of processing.
Cross-border transfer requirements?
SCC + TIA + (for CN/RU) data localisation + government security assessment.