With CPRA in effect, organizations operating in California need to consider the vendors they work with and how they operate.