Legal

CPRA

The California Privacy Rights Act — an amendment to the CCPA that expanded consumer rights and created the California Privacy Protection Agency.

The California Privacy Rights Act (CPRA) is a ballot initiative that amended and expanded the CCPA. It was approved by California voters in November 2020 and became fully operative on January 1, 2023.

What CPRA Added

  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information
  • Created the California Privacy Protection Agency (CPPA) for enforcement
  • Introduced the concept of "sharing" data (broader than "selling")
  • Extended obligations to service providers and contractors
  • Mandatory data protection assessments for high-risk processing

Related Terms

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.

CCPALegal

The California Consumer Privacy Act — a US state law giving California residents control over their personal information.

Privacy Impact AssessmentCompliance

A systematic process for evaluating how a project or system will affect the privacy of individuals.

CCPAChildren's Privacy