Before the dust has even settled on many California Consumer
Privacy Act (CCPA) compliance projects, California voters have
welcomed the future of privacy by overwhelmingly approving
Proposition 24: The California Privacy Rights Act (CPRA).
Building off of the CCPA framework, the CPRA expands the rights of
California consumers, adds new responsibilities for both business
and service providers, and creates a new state agency, the
California Privacy Protection Agency (the Agency), to take over
enforcement from the state Attorney General. Here are the
notable changes:
First, every business will be happy to know that the B2B and
employee information sunsets have been extended until January 1,
2023 (after being extended by another year until 2022 by the
legislature).
