What It Is

Six Sigma is a de facto industry standard (ISO 13053:2011) and disciplined framework for process improvement through defect prevention and variation reduction. It employs a data-driven, statistical approach targeting 3.4 defects per million opportunities (DPMO), using DMAIC (Define, Measure, Analyze, Improve, Control) for existing processes and DMADV for new designs.

Key Components

• Structured DMAIC/DMADV phases with mandatory deliverables like Project Charters, SIPOC maps, and control plans.
• Professionalized **belt systemChampions, Master Black Belts, Black Belts, Green Belts.
• Statistical tools: Gage R&R, hypothesis testing, DOE, SPC.
• Governance via tollgates, audits; certification through bodies like ASQ.

Why Organizations Use It

Delivers quantifiable savings (e.g., Motorola $17B, GE $1B+), enhances customer satisfaction, reduces risks. Voluntary adoption for competitive edge, integrates with Lean/ISO for compliance in regulated sectors like healthcare, finance.

Implementation Overview

Phased rollout: executive sponsorship, training, project portfolio selection, DMAIC execution, sustainment via SPC/SOPs. Suited for enterprises across industries; 12-18 months typical, requiring leadership, belts, and cultural change.

What It Is

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), is a state regulation establishing consumer privacy rights for California residents. Its primary purpose is to grant individuals control over their personal information collected by businesses, with extraterritorial scope for qualifying entities. It employs a rights-based approach focused on transparency, opt-outs, and enforcement.

Key Components

• Core consumer rights: know/access, delete, opt-out of sales/sharing, correct, limit sensitive personal information use
• Business obligations: notices at collection, privacy policies, vendor contracts, data security, 45-day request responses
• No fixed controls count; principles include data minimization, non-discrimination, Global Privacy Control (GPC) honoring
• Compliance model via self-assessment, CPPA/AG enforcement, no formal certification

Why Organizations Use It

• Legal compliance to avoid fines ($2,500-$7,500 per violation) and private breach actions
• Risk reduction for data breaches, reputational harm
• Builds consumer trust, enables market differentiation, aligns with GDPR
• Strategic data governance efficiencies, vendor controls

Implementation Overview

Phased approach: scoping/gap analysis, policy/notices, technical controls (DSAR automation, opt-outs), operationalization/training, audits. Applies to for-profits meeting thresholds ($25M revenue, 100K+ CA data subjects, 50% data revenue). Targets tech/retail/finance; ongoing audits required.