CPRA – California Privacy Rights Act
CPRA is the new Californian Privacy law. It will come into force in 2023 and is described as „groundbreaking“. Compared to CCPA the new law will bring many changes. Here is an quick overview on what you need to know about CPRA.
CPRA key differences to CCPA
While CCPA is a very „simple“ privacy, especially when compared to GDPR or LGPD, the new CPRA privacy law will bring new rules that will help to protect personal information. This includes:
- Higher requirements for companies to perform regular risk assessments
- Higher requirements for companies to perform regular cybersecurity audits
- A new CPRA agency will be formed which will check companies and protect consumers
- Consumer right to correct data
- Consumer right to restrict the user of sensitive personal information
- Consumer right to prevent companies from storing information longer than necessary
- Consumer right to opt out from precise geo location
- Consumer right to restrict the transfer of personal information
- and many more
Recommended by Lawyers and Data Protection Officers …
What, when, why, how?
CPRA will come into force on January 1, 2023 and the ne CPRA agency will be able to enforce the law from July 1, 2023. Anyhow, the agency will be able to check all violations for personal information collected starting from January 1, 2022.
Does it apply to my company?CPRA will apply to business that fit into these criteria:
- More than 50% of the companies annual revenue is made from sharing or selling personal information of California consumers
- The company has a gross revenue of more than 25,000,000 per year
- The company buys, sells or shares personal information of more than 100,000 California consumers
We already helped more than 10,000 websites becoming GDPR- & CCPA-compliant …
Our clients include some of the largest websites and well-known brands in the world.
… and many more.