Ask the Expert: Are You Ready for the CPRA?

The California Privacy Rights Act (CPRA) is a new consumer data privacy law passed in California that goes into effect in January 2023. The CPRA is a set of rules that clarifies and augments the California Consumer Privacy Act (CCPA) that went into effect in January 2020.

Some significant features of the CPRA include:

• Creating a California Privacy Protection Agency (CPPA)
• The new right for individuals to request correction of data
• A new definition for sensitive data that is derived from multiple data points

Here’s some really important things you should remember:

• businesses need to be transparent
• businesses need to have a process and procedures in place
• businesses must stay vigilant

Though it’s 2 years down the road, you need to start getting ready for CPRA now. The best way to start getting ready for CPRA is to understand which parts of the law apply to your business, because not every part of the law will apply to all businesses. It is also essential to understand how your company will respond to the data subject access request or notice from regulators about data practices.

Data minimization will reduce their risk and cost of data breaches or unauthorized access to consumer information. It is also essential that businesses make sure that their privacy policy aligns with their business actions so that they are not liable for things like false claims or deceptive practices.