What is CPRA?

California Privacy Rights Act (CPRA) is an extended version of CCPA.

It is set to replace the existing legislation and come into effect on January 1, 2023.  While it maintains the core principle of CCPA, the new law is a scaled-up version of its predecessor. It expands CCPA by updating and introducing additions, such as

  • four new consumer rights
  • expansion of businesses subject to compliance;
  • accountability on businesses using third parties;
  • a new sensitive personal information category; and
  • new GDPR-like consent requirements.