CCPA compliance requires education and training