The CPRA (California Privacy Rights Act) is an addendum to the CCPA (California Consumer Privacy Act). The CPRA will go into effect on 1st January 2023 but will be enforceable from 1st July 2023.

While there are a few differences, especially new consumer rights added, the main changes revolve around sharing personal data and introducing the SPI category (Sensitive Personal Information) - which includes precise geolocation. For more information, see Everything You Need To Know About The CPRA Rollout.

How to get compliant

To become compliant with CPRA, you must follow the instructions below:

  • Inform consumers of the CPRA's new rights through their privacy policy.
  • Provide a link to users for Do Not Sell or Share My Personal Information and a link for Limit the Use of My Sensitive Personal Information. This can be coupled if it allows the user to opt-out.
  • Acquire consent to sell or share users' (less than 16 years old) personal information from the guardian.
  • Given the above, rely on a mechanism to scale and process opt-out requests. For more information, see Opt-Out Mechanism.

On This Page

Last Updated on: 13 Jul, 2023