If not already underway, companies need to jumpstart compliance efforts for the California Consumer Protection Act. After understanding the scope of the project, it is important to tackle compliance in a way that is repeatable and sustainable. Part two of our article series on preparing for this expansive regulation includes advice on best practices when setting up programs and policies, and covers the implications of potential amendments to the law and what to expect regarding enforcement. Part one explained why companies need to start preparing immediately, clarified misconceptions about whether certain companies are subject the law, discussed setting the project’s scope and timeline and examined how to obtain buy-in for the program. See also “What to Expect From California’s Expansive Privacy Legislation” (Jul. 18, 2018).