What is CPRA?
The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January 1, 2023, and builds on the earlier California Consumers Privacy Act (CCPA), which became effective on January 1, 2020.
Who Needs to Comply with CPRA?
Businesses that need to comply with CPRA are those that operate in California and either have annual gross revenues over $25 million, buy, receive, or sell personal data of 100,000 or more consumers or households, or derive 50% or more of annual revenues from selling or sharing consumers' personal data.
What is CPPA?
The CPRA establishes the California Privacy Protection Agency (CPPA) as the primary body responsible for safeguarding digital privacy for Californians. The CPPA has full legal, administrative, and enforcement rights under the CPRA, with a board of five members, a chairperson, and an executive director. The CPPA’s responsibilities include education, rulemaking, enforcement, and certifications, supported by an annual budget of $10 million.
Why be CPRA Compliant?
Ensuring your business and practices are CPRA compliant helps avoid legal penalties, enhance consumer trust, and gain a competitive edge over others in a privacy-conscious digital landscape.
