California Privacy Rights Act

The California Privacy Rights Act (CPRA), also referred to by its original title as the California Consumer Privacy Act (CCPA), is a comprehensive consumer privacy law that requires covered businesses to follow strict privacy requirements with respect to the personal information they collect about consumers.

The law’s broad provisions also encompass personal information collected about employees, job applicants and independent contractors, meaning employers must follow CPRA requirements as discussed in further detail below in relation to the collection of such personal information.

CPRA Background CPRA Background
The original law, known as the California Consumer Privacy Act (CCPA), was passed in 2018 and became effective in 2020.

CPRA CoverageCPRA Coverage
The CPRA will apply specifically to for-profit businesses doing business in the state of California that meet one of the following criteria.
Read about a recent agency action.

Employer’s Obligations Under the CPRAEmployer’s Obligations Under the CPRA
The CPRA gives consumers a lot of control over their personal information collected by businesses.

Notice and Disclosure RequirementsNotice and Disclosure Requirements
The CPRA contains notice and disclosure requirements for covered businesses.

Consumer Rights Under CPRAConsumer Rights Under CPRA
The CPRA grants consumers several rights under the law, which have been mentioned briefly above.

CPRA Training Requirements CPRA Training Requirements
Businesses covered by the CPRA have certain training obligations.

CPRA Compliance TipsCPRA Compliance Tips
Employers subject to the CPRA should begin preparing now to comply with upcoming CPRA changes effective January 1, 2023.

California Privacy Rights Act

Forms