When did CPRA go into effect?

The California Privacy Rights Act (CPRA) is a privacy law that amends and expands the existing California Consumer Privacy Act (CCPA). As of January 1, 2023, the substantive provisions of CPRA are in effect. However, note that CPRA applies to all data collected from January 1, 2022 because the law has a look-back period of 12 months.

The CPRA will be enforced from July 1, 2023, giving businesses a six-month compliance window after it becomes operative. Any enforcement will apply only to violations occurring on or after that date. The CCPA will remain in effect and enforceable until that date.

Important dates for CPRA

  • Operative from: January 1, 2023
  • Enforcement from: July 1, 2023