California's New Data Privacy Law: The CPRA

California's New Data Privacy Law: The CPRA

On November 3, 2020, Californians for Consumer Privacy passed the California Privacy Rights Act (CPRA), a significant update to the California Consumer Privacy Act (CCPA) that went into effect at the beginning of 2020. The CPRA expands upon the CCPA by granting California residents even greater control over their personal information and furthering the protection of their data privacy.

The CPRA introduces new rights for California residents, including the right to correct personal information and the right to limit the use and disclosure of sensitive personal information. It also establishes a new California Privacy Protection Agency (CPPA), which will be dedicated to enforcing privacy laws and regulations and will have the authority to impose penalties for violations.

This legislative advancement signifies a deeper commitment to privacy rights and reflects the growing public concern over data privacy. The CPRA will come into effect in January 2023, giving businesses a two-year transition period to adapt their privacy policies and practices accordingly. The implementation of CPRA will likely have far-reaching implications for businesses operating in California and beyond, as it sets a new standard for data privacy protection in the United States.