California CCPA / CPRA

California CCPA/CPRA

The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) establish stringent privacy requirements for businesses, including the need to provide consumers with greater control over their personal information and to implement robust data protection measures.

What is the CCPA about?

The CCPA is designed to put consumers in the driver’s seat when it comes to their personal information. Here are some of its key provisions:

Right to Know: Consumers can request information about what personal information a business has collected about them and how it’s being used.
Right to Access: Consumers have the right to access their personal information
Right to Delete: Individuals can ask businesses to delete their personal information, with some exceptions

What is the CPRA about?

The CPRA strengthens consumer rights and establishes official oversight. Here are some of its key provisions:

Right to Correction: Consumers can request that inaccurate personal information be corrected.
Consent requirements: Increased requirements for explicit consent – especially for sensitive data
Right to opt-out: Consumers have the right to opt out of the sale of their personal information. Businesses are required to post a “Do Not Sell My Personal Information” link on their websites.
Redefine covered entities: Excludes small businesses in favor of including large businesses that meet a certain revenue threshold.
California Privacy Protection Agency (CPPA): This agency is charged with implementing and enforcing the CPRA in California. Businesses that fail to comply with the CPRA may be subject to fines imposed by the CPPA.