Automate CCPA/CPRA consumer rights request intake with deadline tracking for the required acknowledgment and 45-day (extendable to 90-day) response windows.

Verified steps

1. Capture inbound requests to know, delete, or correct (and separately, opt-out-of-sale/sharing or limit-use-of-sensitive-information requests) with a timestamp marking the date received, since statutory clocks start from that date.
2. Trigger an acknowledgment within 10 business days of receipt, confirming receipt and describing how the request will be handled.
3. Set the primary response deadline at 45 calendar days from receipt for know/delete/correct requests; identity verification time does not pause this clock.
4. Build a one-time-extension path: if more time is genuinely needed, notify the consumer within the initial 45-day window that you are extending, for a maximum combined window of 90 days.
5. Track opt-out-of-sale/sharing and limit-use requests on a separate, shorter deadline (as soon as feasible, up to 15 business days).
6. Log every state change (received, acknowledged, verified, extended, fulfilled) as audit/compliance evidence in case of a regulator inquiry.