Risk and Compliance Why Data Map or Categorize Vendors When the CCPA Does Not Require Either? Ron NaullsAugust 20, 2019