Californians just passed a ballot measure that will soon expand the nation’s most stringent data privacy law—and it will have an impact on employers across the country.
By voting in favor of Proposition 24—the California Privacy Rights Act of 2020 (CPRA)—employers and businesses will face an expansion of the state’s landmark privacy law, the California Consumer Privacy Act of 2018 (CCPA). Most provisions of the CPRA go into effect on Jan. 1, 2023, although some provisions have a 12-month lookback, as explained below.
Here’s what employers and businesses need to know about this dramatic new legal obligation—especially those beyond the California border who may not recognize their obligations.