Draft or review a privacy notice and a notice at collection

Key facts

Human involvement: YellowClose supervision
How AI is used: Turn the client's data map into a section outline for a privacy notice and a notice at collection, with a blank beside each statutory item.
What the lawyer must review: Civil Code section 1798.100 requires a business that controls collection to say, at or before collection, the categories collected, the purposes, whether the information is sold or shared, the sensitive-information categories where relevant, and the retention period or the criteria used to set it. Collection must be reasonably necessary and proportionate to the disclosed purpose. The Attorney General's CCPA page states the consumer rights the notice has to be able to support, including know, delete, correct, opt out of sale or sharing, and limit use of sensitive information. There is no single federal privacy statute. If the data are protected health information or non-public financial information, open HIPAA or the Gramm-Leach-Bliley Act before you treat a CCPA notice as enough. Opinion 512: verify the draft and do not put client data into a tool whose retention and training use you have not checked. Model Rule 1.6 still applies.
Written for / version: United States versionUS

Who does what

Who does what
Role	What they do
Assistance	Potential support includes organising research leads. Confirm the tool’s capability and permitted scope.
Lawyer	Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output.

Trace every relied-on figure to its source, confirm dates and assumptions, and independently recalculate totals or derived amounts.
Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.

Forms and precedents for this task
Form or precedent	Kind	AI use	Summary
CCPA privacy policy	Policy	AI use Yellow	Privacy policy for a business that the California Consumer Privacy Act may cover.
Notice at collection	Notice	AI use Yellow	Short notice given at or before the point of collection under Civil Code § 1798.100(a).

Signed-in accounts can read the full text of each one. All precedents.