Both GDPR and CCPA make it clear that an organization is fully responsible for the vendors within their supply chains, and the onus is on those organizations to ensure compliance. Most companies don’t realize the significance of this mandate and have taken little to no steps to ensure compliance.