Skegbydave / Getty Images
In November, Californians approved a ballot measure, Proposition 24, a.k.a. the California Privacy Rights Act (CPRA), to create a new consumer data privacy agency. It puts California yet another step ahead of other states in terms of privacy productions for consumers and data security requirements for enterprises. California already had a privacy law in place, the California Consumer Privacy Act (CCPA), adopted in 2018. It went into effect in January 2020, and enforcement officially began this past July.
The CCPA was supposed to help keep California from passing a more stringent privacy initiative via ballot. CCPA is probably one of the leading privacy laws in the US that protects consumers today, says Christophe Bertrand, analyst at Enterprise Strategy Group, but it was originally supposed to be more restrictive. It was the product of many political negotiations that weakened the final product.
To print this article, all you need is to be registered or login on Mondaq.com.
Keypoint: Although the CPRA will not become fully operative
until January 1, 2023, the provisions creating the California
Privacy Protection Agency and extending the business-to-business
and employee exemptions are now operative.
On December 11, 2020, California Secretary of State Alex
Padilla
certified the results of the November General Election. As
a result, the California Privacy Rights Act (CPRA) became effective
today, pursuant to Section 31 of Proposition 24 and Article II,
Section 10(a) of the California Constitution. Notwithstanding the
CPRA s effective date, the majority of its provisions will
not become operative until January 1, 2023. Nonetheless, certain
To embed, copy and paste the code into your website or blog:
Keypoint: Although the CPRA will not become fully operative until January 1, 2023, the provisions creating the California Privacy Protection Agency and extending the business-to-business and employee exemptions are now operative.
On December 11, 2020, California Secretary of State Alex Padilla certified the results of the November General Election. As a result, the California Privacy Rights Act (CPRA) became effective today, pursuant to Section 31 of Proposition 24 and Article II, Section 10(a) of the California Constitution. Notwithstanding the CPRA’s effective date, the majority of its provisions will not become operative until January 1, 2023. Nonetheless, certain notable provisions are now fully operative:
The California Attorney General’s Office recently released a
As background, the Attorney General’s Office had only just recently given notice of a third set of modifications on October 12, 2020. The third set of modifications revised the regulations relating to the notice of a consumer’s right to opt-out of the sale of their personal information. Our
previous post detailed the specific changes in the third set of modifications.
The Attorney General’s Office received around 20 comments in response to the third set of modifications; these modifications have not yet been accepted and finalized. The fourth set of modifications are in response to the comments to the third set of modifications and are intended to clarify and conform the proposed regulations to existing law. The changes made include:
To embed, copy and paste the code into your website or blog:
In a November 2019 article titled “New year to ring in nation’s most comprehensive privacy law,” we gave an update on the California Consumer Privacy Act (CCPA), the nation’s most robust consumer privacy law that governs the collection of personal information by certain businesses regardless of whether they are physically located in California.
Nearly one year later, a majority of California voters approved the California Privacy Rights Act of 2020 (CPRA), which amends and expands the CCPA and establishes the nation’s first government regulator dedicated to consumer privacy.