CPRA – California Privacy Rights Act

CPRA is the new Californian Privacy law. It will come into force in 2023 and is described as “groundbreaking”. Compared to CCPA the new law will bring many changes. Here is an quick overview on what you need to know about CPRA.

CPRA key differences to CCPA

While CCPA is a very “simple” privacy, especially when compared to GDPR or LGPD, the new CPRA privacy law will bring new rules that will help to protect personal information. This includes:

  • Higher requirements for companies to perform regular risk assessments
  • Higher requirements for companies to perform regular cybersecurity audits
  • A new CPRA agency will be formed which will check companies and protect consumers
  • Consumer right to correct data
  • Consumer right to restrict the user of sensitive personal information
  • Consumer right to prevent companies from storing information longer than necessary
  • Consumer right to opt out from precise geo location
  • Consumer right to restrict the transfer of personal information
  • and many more

Recommended by Lawyers and Data Protection Officers …

What, when, why, how?

CPRA will come into force on January 1, 2023 and the ne CPRA agency will be able to enforce the law from July 1, 2023. Anyhow, the agency will be able to check all violations for personal information collected starting from January 1, 2022.

Does it apply to my company?

CPRA will apply to business that fit into these criteria:
  • More than 50% of the companies annual revenue is made from sharing or selling personal information of California consumers
  • The company has a gross revenue of more than 25,000,000 per year
  • The company buys, sells or shares personal information of more than 100,000 California consumers
New with this is especially that the law now also includes “sharing” and not only selling. This means that usually all online advertising would fall under this.

We already helped more than 15,000 websites becoming GDPR- & CCPA-compliant …

Our clients include some of the largest websites and well-known brands in the world.

… and many more.


Not sure if you need a CMP?

If you are unsure if your company needs a CMP or not, please get in touch with us – we will help you find the right solution for your company!

Get In Touch