PrivOptic
Interactive demo · CCPA / CPRA readiness 2026–2028
See exactly what CCPA/CPRA requires of you.
California's new ADMT, risk-assessment, and cybersecurity-audit rules phase in from 2026 to 2028. Run the live ADMT scope check below to see how the full tool turns your answers into obligations and deadlines.
ADMT analysis
Risk register
Auto roadmap
Verified to CPPA final regs
Live tool · ADMT scope check
Is your automated tool in scope?
The 2026 rules apply when a technology processes personal information and uses computation to replace human judgment for a significant decision. Answer three questions.
1 · Does the tool process personal information?
2 · Does it replace or substantially replace human decision-making? (a human who merely rubber-stamps the output doesn't count)
3 · Is the output used for a significant decision?
Preview · the compliance clock
Your 2026–2028 timeline
The full tool generates a dated, personalized roadmap. Here are the fixed milestones every covered business is working toward.
Jan 1, 2026
Regulations take effect; stand up risk-assessment process
Jan 1, 2027
ADMT notice, opt-out, access & appeal live
Dec 31, 2027
Risk assessments for existing processing complete
Apr 1, 2028
First CPPA attestation; cyber-audit cert ($100M+)
Get the full readiness tool
Applicability engine, full data inventory, ADMT analysis, auto-built risk register, dated 2026–2028 roadmap, and CSV/PDF export. Self-contained — runs anywhere, data stays in your browser.
View the tool →Awareness and planning aid, not legal advice. Verify against the CPPA's final regulations. © PrivOptic.