Compliance frameworks and training for California
Lavawall® maps 3 compliance frameworks specific to California and offers 6 staff training courses written for it. Open a framework for its requirements and assessment tiers; the courses are listed below.
This is general information to help you find the right material, not legal advice. Which rules apply to you depends on your organization.
Compliance frameworks for California
Staff training for California
Courses your team can take in the browser, with a short quiz and a completion record. See all Lavawall training.
- CCPA and CPRA — California Consumer Privacy (about 33 minutes)
For businesses serving California consumers. Covers consumer rights to know, delete, correct, and opt out of sale of personal information, sensitive personal information protections, and the California Privacy Protect... - California DMV Records and License Plate Readers: Module (about 8 minutes)
A short module for staff who use California DMV records or automated license plate readers: who may receive DMV information, the confidential residence address, and the ALPR usage and privacy policy. California only. ... - California Finance and Insurance Privacy: Module (about 10 minutes)
A short module for staff of California financial institutions and insurers: the Financial Information Privacy Act notice and choices, incident reporting to the DFPI, and the insurance privacy and security regulations.... - California Health Information: Module (about 10 minutes)
A short module for staff who handle medical information in California: the Confidentiality of Medical Information Act, patient access, breach reporting to the Department of Public Health, Medi-Cal data, and AI tools. ... - California Privacy and Security (about 25 minutes)
For anyone whose work touches personal information about people in California. The main privacy and security rules, breach reporting, the Privacy Protection Agency’s new regulations, and how existing California law ... - California Public Sector Privacy: Module (about 10 minutes)
A short module for staff of California state and local agencies and their contractors: the Public Records Act, the Information Practices Act, incident reporting, Medi-Cal and benefits data, and CLETS. California only....
Also relevant across the United States
- NIST SP 800-171
- FTC Safeguards Rule
- GLBA: Gramm-Leach-Bliley Act
- HIPAA Security Rule
- Sarbanes-Oxley Act (SOX)
- CMMC
- FDA Cybersecurity for Cyber Devices (Section 524B)
- ANSI/AAMI SW96 Medical Device Security Risk Management
All United States frameworks and training
Frameworks that apply anywhere, such as ISO 27001, SOC 2, and NIST, are on the full framework list.
Common questions
Which compliance frameworks does Lavawall cover for California?
Lavawall maps 3 frameworks specific to California, including CCPA / CPRA, California state privacy and sector law, CPPA regulations: cybersecurity audits. Each has assessment tiers, questionnaires, and policy templates, and its requirements map to a shared control set so evidence collected once counts everywhere it applies.
Does Lavawall offer security and privacy training for California?
Yes. Lavawall Training has 6 courses written for California, each with a short quiz and a completion record you can show an auditor.
Is this legal advice?
No. The frameworks and courses are general information built from the official law and regulator text, to help you find and organize the right material. Ask a lawyer how the rules apply to your organization.