Exemption workpaper

What does the exemption workpaper produce?

Prepare distinct entity, data and activity exemption arguments with exact coverage and exclusions.

Use the exact local files and task-specific inputs listed below. Preparation and review stay in this browser. Inspect all findings before preparing the finalized pack.

What do you need before you start?

• Define the authorized source population and your review rules.
• Keep the unchanged original files and record the snapshot and exclusions.
• Review missing and invalid inputs before preparing the finalized pack.

What information do you enter?

Select the actual local sources and freeze the task-specific inputs below. Keep source files and complete findings private.

• Reference. Stable internal reference for this exact privacy workpaper.
• Working pack version. Customer document version.
• Organization. Actual organization owning the selected cases.
• Your jurisdiction. Jurisdiction and entity scope approved for this pack. Each case retains its own operative jurisdiction.
• Responsible reviewer. Customer-authorized reviewer for the selected decision method.
• Review timestamp. Exact timestamp with seconds and confirmed UTC offset.
• Approved privacy scope. Entities, activities, data, rules, populations, exclusions and uncertainty.
• Scope approval reference. Customer approval for the included cases.
• Approved preparation method. Your exact method version.
• Method source reference. Actual local file containing the approved method.
• Approved method source locator. Exact source location supporting the selected method.
• Method approver. Customer-authorized approver.
• Method approval timestamp. Exact approved instant no later than review.
• Privacy population. Selected cases or a declared complete supplied population.
• Declared case count. Required for your declared complete case population.
• Entity, data and activity exemption schedule case inputs. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Objects. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Exemptions. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Decisions. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Evidence. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Actions. Readable typed rows with exact case IDs, operative rules, original sources and approvals.

What you can download

Every result must identify its supplied facts, assumptions and unresolved items.

Fictional review report (PDF). Editable review (DOCX). Complete fictional pack (ZIP). Requires tailoring and responsible review. Samples use the finalized renderer.

How does the exemption workpaper work?

1. 1
   Select the actual sources

   Reference. Stable internal reference for this exact privacy workpaper.

2. 2
   Freeze the review rules

   Separate each claimed exemption by its operative jurisdiction, provision, rule version and scope. Prevent an activity or data exemption from silently exempting an entire entity. Preserve excluded objects, contradictory arguments and the final reviewed outcome.

3. 3
   Inspect complete findings

   Review all source-linked results and unresolved items. Free JSON and CSV preserve complete results.

4. 4
   Keep recoverable work

   Exact source bytes and draft strings save locally. Strict restore checks tool identity, typed structure, file hashes and history before replacing current work. Prior checkpoints and generic drafts remain downloadable.

5. 5
   Prepare the finalized pack

   Prepare seven core files and the exact selected attachments, then download them free. Review the fictional sample below.

Method and sources

Apply the steps above to the supported inputs. Use the listed source sections to review the rule basis, assumptions and limits.

• California Consumer Privacy Act and regulationsSupports the named preparation structure. Actual operative versions, source facts and responsible scope decisions remain selected by you. Current official rule resources. Entity, data and activity exclusions require the precise selected operative provision, coverage population and customer review.California Privacy Protection Agency. Reviewed 2026-10-09.

Common questions

What still needs review?

This workpaper applies your exact rules to supplied facts and prepares source-linked decisions and drafts. The customer confirms jurisdiction, coverage, operative rule version, populations and approvals. It does not certify legal applicability, exemption, consent authenticity, DPO appointment, notice delivery or a permitted transaction. Exact originals stay browser-local. Original files are not saved to the cloud.

At most 500 rows and 200000 characters per table, 20 files, 10 MB each and 25 MB total. Input metadata is bounded to 900 KB. Exact JSON source comparisons support originals up to 1 MB.

Formal previews are bounded. Complete accepted rows, exact decision drafts and source results remain in Excel and JSON.

Related working records

The related workspace contains working administrative records. Open it for the related administrative task.

Related tools

Browse all privacy and data rights tools.

• California and Virginia privacy applicability checkerReview selected privacy-rule criteria against reported facts and retain unresolved applicability questions. Review the result.
• State-law threshold calculatorApply selected, versioned thresholds to confirmed revenue and processing figures. Try a free example. Review the result.
• Controller, processor and joint-controller role mapperMap reported roles for a selected GDPR or UK GDPR relationship. Confirm territorial scope separately, then review the result.
• DPO requirement assessment packAssess a selected GDPR or UK GDPR Article 37 duty from your facts and rule version. Confirm territorial scope and review the result.
• Privacy program gap assessmentCompare documented practices with a requirements library. Try a free example. Review your inputs and result. No account or payment required.