Are You Ready For CPRA? 6 Tips For The Final 6 Months

We are officially six months away from the California Privacy Rights Act ("CPRA") taking effect and amending the California Consumer Privacy Act ("CCPA"). Even for companies that have grown comfortable with requirements under the CCPA, the CPRA changes require planning and preparation. With CPRA taking effect on January 1, 2023, here are six tips to begin that preparation:

1. Brace for B2B and HR Data Protections: That's right. On January 1, 2023, personal information deriving from human resources and business-to-business relationships is now covered. The CCPA exempted employee and B2B communications from having the same personal data rights granted to California consumers, but that expires at the start of 2023 and the effective date of CPRA. If you did not incorporate HR and B2B data into your CCPA compliance program, you still have time to do so while also layering the new CPRA requirements on top of existing obligations.