What’s new in the world of data privacy?
You may have already heard of the California Consumer Privacy Act (CCPA). So what is the California Privacy Rights Act (CPRA)?
Why is this important
Your data privacy is at the heart of why we exist, which is why we want to help keep you up-to-date on all new and upcoming laws that will affect you and how other brands handle your data!
CPRA vs. CCPA
The California Privacy Rights Act (CPRA) amends and expands the California Consumer Privacy Act (CCPA)—California’s current privacy law that itself is nearly brand new. Note: The CPRA isn’t a separate law – it is an expansion of the current law, to strengthen protections for consumers and clarify some of the more unclear compliance questions for organizations.The CPRA will come into effect on Jan 1, 2023. Until that time, businesses and companies must continue to comply with the current CCPA.
Some Notable Changes
- A new government agency is being created to handle enforcement and compliance with these new privacy regulations.
- The CPRA doubles the CCPA’s threshold number of consumers or households from 50,000 to 100,000, meaning the law will apply slightly less to small and midsize businesses.
- The CPRA expands applicability to businesses that generate most of their revenue from sharing PI, not just selling it.
- Right to Correction: consumers can request businesses edit their information if it is inaccurate
- Right to Restrict Sensitive PI: Consumers may limit the use and disclosure of sensitive PI for certain secondary purposes, including prohibiting businesses from disclosing sensitive PI to third parties
What does all this mean for me?
Firstly, it means that companies and businesses are increasingly being held accountable to a stricter standard. Laws are being put into place to better protect consumer privacy and that means things are moving in the right direction!