Does the CCPA apply to paper records?

Is there an obligation to monitor service providers under the CCPA?

What rules will California’s Attorney General propose to interpret the CCPA?