Identifying the location of personal data ranks high on the list of demands information security professionals face when adhering to CCPA