California Privacy Rights Act

E411078

The California Privacy Rights Act is a state privacy law that significantly expands consumer data protection rights and business obligations in California, building on and strengthening the original CCPA framework.

All labels observed (3)

How this entity was disambiguated

Statements (50)

Predicate Object
instanceOf California statute
data protection law
state privacy law
amends California Consumer Privacy Act
linked to: CCPA
appliesTo businesses that buy sell or share personal information of California consumers
for-profit businesses meeting certain thresholds
approvalMethod ballot initiative
ballotMeasureNumber Proposition 24
buildsOn California Consumer Privacy Act
linked to: CCPA
country United States
covers consumers who are California residents
creates California Privacy Protection Agency
definesCategory sensitive personal information
effectiveDate 2023-01-01
electionType California statewide general election
enactmentDate 2020-11-03
establishes California Privacy Protection Agency enforcement authority
fullName California Privacy Rights Act of 2020
goal to enhance privacy rights and consumer protection for California residents
grantsRight enhanced right to opt out of certain data sharing
right to correct inaccurate personal information
right to data portability
right to delete personal information subject to certain exceptions
right to know categories of personal information collected
right to limit use of sensitive personal information
right to non-discrimination for exercising privacy rights
imposesObligation contractual requirements for service providers contractors and third parties
data minimization
expanded notice requirements to consumers
honoring opt-out signals for cross-context behavioral advertising
purpose limitation
reasonable security procedures and practices
storage limitation
increases maximum administrative fines for violations involving minors
jurisdiction State of California
language English
primarySubject consumer data privacy
personal information protection
providesEnforcementMechanism administrative enforcement by California Privacy Protection Agency
civil enforcement by California Attorney General
raisesThresholdsFor business applicability compared to CCPA in some respects
regulator California Attorney General
California Privacy Protection Agency
replaces certain CCPA provisions
restricts sharing of personal information for cross-context behavioral advertising without opt-out
use of personal information for purposes incompatible with disclosed purposes
retains private right of action for certain data breaches
section California Civil Code §1798.100 et seq.
shortName CPRA
strengthens California Consumer Privacy Act
linked to: CCPA

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

CCPA amendedBy California Privacy Rights Act
California Privacy Rights Act shortName CPRA
linked to: California Privacy Rights Act
California Privacy Rights Act fullName California Privacy Rights Act of 2020
linked to: California Privacy Rights Act