consumers or
households. The CPRA also clarifies that the revenue threshold of $25 million applies to revenue from the “preceding calendar year.” § 1798.140(d)(1)(A) and (B).
Restriction on Legislature to Amend: Finally, in response to critics who alleged that the original CCPA became “watered down” by the legislative process, the CPRA limits the power of the state legislature to change the law. The California Legislature may only pass amendments to the statute that “are consistent with and further [its] purpose and intent.” CPRA Section 25.
Tasks for 2021
Updating Links and Policies: As noted above, the CPRA includes new rights to correct and to limit the use of newly defined “sensitive personal information” and regulates the sharing (not just selling) of personal information. As a result, businesses will need to update their “Do Not Sell My Personal Information” links to read “Do Not Sell or Share My Personal Information,” and include a separate link