What is CPRA?

The California Privacy Rights Act (CPRA) strengthens the California Consumer Privacy Act by giving California residents greater control over their personal information.

The law introduces additional rights and stricter obligations, including:

• correcting inaccurate personal information;

• limiting certain uses of sensitive personal information;

• preventing personal data from being sold or disclosed for cross-context behavioural advertising;

• greater accountability for businesses and their service providers; and

• enforcement by the California Privacy Protection Agency.

The CPRA does not replace the CCPA. It updates and expands the existing California privacy framework.