The CPRA Sensitive Personal Information Data Category

As the clock ticks closer to January 1, 2023, businesses need to, among other measures, update their privacy policies to comply with the California Privacy Rights Act ("CPRA"). At the start of 2023, the CPRA will come into effect, greatly altering California's privacy landscape. While, in many ways, the CPRA picks up where the California Consumer Privacy Act ("CPPA") left off, the CPRA should be seen as a significant expansion of consumer privacy rights codified under the CCPA. Of special importance, the CPRA creates a new regulated category of data, referred to in the statute as "sensitive personal information."

CPRA Sensitive Personal Information

Pursuant to the CPRA, consumers will be able to prescribe how businesses use their sensitive personal information, including prohibiting the disclosure of this information to third parties under certain circumstances.