We had started getting (sort of) comfortable with the CCPA—California’s omnibus privacy legislation—when the state decided to change the law again. The CCPA just began to be enforced in July of 2020 when a mere 4 months later the state passes Proposition 24, a stricter, more all-encompassing privacy law aimed at protecting the same consumers (and a few more) from most of the same activities of the most of the same businesses.
The new law, known as the California Privacy Rights Act (“CPRA”) becomes fully effective January 1, 2023, with “right to know” requests applicable from January 1, 2022, so your company has time to prepare, but prepare it must. The CPRA starts with the obligations imposed on your business by CCPA and adds to them, so you will need to be more restrictive in treatment of the consumer data you collect and provide more options to California consumers.
This article does not address all of the changes to current law made by the CPRA. Instead, this article addresses some of the provisions that will add operational costs to companies and force regulated businesses to change the way they are currently operating under CCPA. For example, enforcement and audit […]
Click here to view original web page at www.natlawreview.com
