Material Change
Plain-language explanation
A meaningful change to covered processing that creates new negative impacts, increases an existing impact, or makes a safeguard less effective.
Why It Matters
A material change can trigger an update to a CCPA risk assessment as soon as feasible and no later than 45 calendar days after the change.
The material-change concept makes risk assessment an ongoing governance activity rather than a one-time document.