The Laws
The California Consumer Privacy Act (CCPA) gives California consumers more control over the personal information collected and processed by businesses. Additionally, the CCPA provides privacy rights for California consumers including the right to know, right to delete, right to opt-out, and right to non-discrimination.
Signed: June 28, 2018 In effect: January 1, 2020 Enforcement began: July 1, 2020
The California Privacy Rights Act (CPRA) is a ballot initiative that amended and expanded the CCPA to provide additional privacy protections for California consumers. These additional privacy protections include the right to correct and right to limit. CPRA also established the California Privacy Protection Agency (CPPA) to implement and enforce the CCPA. The CPPA is responsible for updating existing regulations and adopting new regulations. The Attorney General also retains civil enforcement authority.
Passed: November 2020 In effect: January 1, 2023 Enforcement begins: July 1, 2023*
*Regulations covering the majority of the CPRA have been finalized as of February 3, 2023, but are still moving through the rulemaking process.
Step 1
Step 2
Start CPRA Compliance Verification
Comply with CPRA requirements by knowing how data flows in your organization, identifying who has access to the collected data, and automating your ability to manage and respond to consumer rights and data subject requests. Apply for independent accountability with BBB National Programs to verify your CPRA privacy promises.