On Election Day, California voters approved Proposition 24, which enacts the California Privacy Rights Act of 2020 (CPRA). The CPRA amends and expands California’s landmark consumer privacy legislation, the California Consumer Privacy Act (CCPA), in a number of important ways. Below are the top 10 changes that may impact your company when the CPRA goes into effect on January 1, 2023.
1. Additional Privacy Notice Disclosure Obligations
Once the CPRA goes into effect, companies must include “sensitive personal information” in their privacy notice to California consumers, disclosing whether or not the company collects, sells, or shares such information. The privacy notice must also disclose the company’s retention policy for each category of personal information.