California Privacy Rights Act: A Compliance Guide

Overview

On November 3, 2020, California voters passed Proposition 24, the California Privacy Rights Act (CPRA), by a margin of approximately 56% to 44%. By this vote, California has decided to amend and supersede the groundbreaking and still new California Consumer Privacy Act (CCPA), which came into effect on January 1, 2020. The CPRA will supersede the CCPA effective January 1, 2023. Until that time, the CCPA remains in effect.

Background

Many readers may be scratching their heads regarding why California would replace the CCPA so quickly, and, thus, some background on how we arrived at the CPRA would be useful. In 2018, Californians for Consumer Privacy sponsored a ballot initiative to place a new privacy law on the November 2018 California ballot. After obtaining the requisite signatures to qualify for the ballot, Californians for Consumer Privacy negotiated a legislative deal whereby it withdrew the initiative in exchange for the legislature passing the