The California Privacy Rights Act of 2020 (CPRA), which expands consumer privacy rights, passed as California Proposition 24 on November 3, 2020. The CPRA expands the existing California Consumer Privacy Act by creating additional consumer privacy rights, such as new rights for personal information correction, expanded rights for personal information deletion, and new personal data retention and proportionality requirements. It also establishes the California Privacy Protection Agency as California’s privacy regulator.
Most of the CPRA’s provisions will become operative on January 1, 2023, and will apply to personal information collected by businesses on or after January 1, 2022. The CPRA will be enforced beginning July 1, 2023.
Please see our recent LawFlash about the CPRA, and reach out to the LawFlash authors or your Morgan Lewis contacts if you have additional questions.