Are You Ready? CPRA Regulations Effective Immediately

A California appeals court has overturned a decision from June 30, 2023, that had delayed – until March 29, 2024 – the enforcement of final regulations adopted under the California Privacy Rights Act (CPRA).

On Friday, February 9, the Court of Appeal for the Third Appellate District held that the final CPRA regulations – which supplemented and amended previously existing regulations under the California Consumer Privacy Act (CCPA) – could be enforced by the Agency immediately.

In other words, the dozen CPRA regulations finalized last spring are now effective and enforceable, including new regulations related to dark patterns, new consumer rights to correct personal information and to opt out of the use and disclosure of sensitive personal information, and requirements on businesses to recognize browser-based opt out preference signals (e.g., Global Privacy Control).