When does CPRA go into effect?

The California Privacy Rights Act (CPRA) is a privacy law that amends and expands the existing California Consumer Privacy Act (CCPA). The CPRA took effect on December 16, 2020, but most of the provisions which revise the prevailing CCPA will become operative from January 1, 2023. However, note that CPRA applies to all data collected as of January 1, 2022 because the law has a look-back period of 12 months.

The CPRA will be enforced from July 1, 2023, giving businesses a six-month compliance window after it becomes operative. Any enforcement will apply only to violations occurring on or after that date. The CCPA will remain in effect and enforceable until that date.

Important dates for CPRA

  • Effective from: December 16, 2020
  • Operative from: January 1, 2023
  • Enforcement from: July 1, 2023