What is the California Privacy Rights Act 2023?

California Privacy Rights Act (CPRA) is a state-wide privacy regulation that “amends” the existing provisions of the California Consumer Privacy Act (CCPA). The CPRA amendments to the CCPA are in effect as of January 1, 2023. Enforcement of the CPRA will not begin until July 1, 2023, however, CCPA’s provisions will remain in effect until that date. 

Some of the major changes that the CPRA makes to the CCPA include:

  • Introducing a new category called sensitive personal information (SPI)
  • Amended definition of organizations that are covered
  • Expanding consumer rights and introducing new rights
  • Establishing a new government enforcement agency – the California Privacy Protection Agency (CPPA)