California Privacy Rights Act

The California Privacy Rights Act is a comprehensive consumer privacy law that requires covered businesses to follow strict privacy requirements with respect to the personal information they collect about consumers. The law’s broad provisions also encompass personal information collected about employees, job applicants and independent contractors.

When the law first took effect in 2020, it was known as the California Consumer Privacy Act, and information collected and used within the context of a person’s employment or application for employment was exempted from most of the law’s requirements.

That exemption, however, expired at the end of 2022, and effective January 1, 2023, personal information about employees and applicants are subject to all CPRA requirements. The law specified that the California Privacy Protection Agency (CPPA) was to have published final regulations by July 1, 2022, with an enforcement date one year later on July 1, 2023. The agency, however, didn’t finalize their regulations until March 29, 2023. As such, per a California state court ruling, the agency cannot begin enforcement until March 29, 2024.

CPRA Background CPRA Background
The original law, known as the California Consumer Privacy Act (CCPA), was passed in 2018 and became effective in 2020.

CPRA CoverageCPRA Coverage
The CPRA will apply specifically to for-profit businesses doing business in the state of California that meet one of the following criteria.
Read about significant updates for 2023.

Employer’s Obligations Under the CPRAEmployer’s Obligations Under the CPRA
The CPRA gives consumers a lot of control over their personal information collected by businesses.

Notice and Disclosure RequirementsNotice and Disclosure Requirements
The CPRA contains notice and disclosure requirements for covered businesses.
Read about significant updates for 2023.

Consumer Rights Under CPRAConsumer Rights Under CPRA
The CPRA grants consumers several rights under the law, which have been mentioned briefly above.
Read about significant updates for 2023.

CPRA Training Requirements CPRA Training Requirements
Businesses covered by the CPRA have certain training obligations.

CPRA Compliance TipsCPRA Compliance Tips
Employers subject to the CPRA should begin preparing now to comply with upcoming CPRA changes effective January 1, 2023.
Read about significant updates for 2023.

Forms

News

CCPA/CPRA: California Businesses Must Complete Required Privacy Training
February 10, 2022