The California Privacy Rights Act (CPRA) is an expansion of the California Consumer Privacy Act (CCPA), designed to enhance privacy rights and consumer protection for residents of California.
Enacted in 2020, the CPRA introduces new data protection standards for businesses that collect, share, or sell the personal information of California residents.
Under the CPRA, consumers have the right to know about and control the personal data businesses collect about them, including the right to delete personal information, correct inaccuracies, and opt out of the sale or sharing of their data.
One key addition to the CPRA is the creation of the California Privacy Protection Agency, which is tasked with enforcing the law and providing guidance to both consumers and businesses on data protection practices.
This marks a significant step towards stricter enforcement of privacy laws in California.
For example, if you’re a California resident, you can request a business to disclose what personal information it has collected about you and for what purpose, highlighting the transparency the CPRA aims to achieve.
Businesses affected by the CPRA are those that earn more than $25 million in gross revenue, buy, sell, or share the personal information of 100,000 or more California residents or households, or derive 50% or more of their annual revenue from selling or sharing California residents’ personal information.
These businesses must comply with the CPRA’s requirements or face potential penalties. This includes updating privacy policies, implementing secure data practices, and providing clear avenues for consumers to exercise their rights.
The CPRA also introduces the concept of sensitive personal information, which includes things like social security numbers, precise geolocation, and race or ethnic origin, providing stricter rules around the use of such information.
This means consumers have the right to limit the use of their sensitive personal information to only those purposes necessary to provide the services or goods requested.
