Skip links

Term: California Privacy Rights Act (CPRA)

The California Privacy Rights Act (CPRA) is a California privacy law that amends the current act (the CCPA). The Act strengthens the data protection rights of consumers.


What Is The CPRA?

The California Privacy Rights Act (CPRA) amends the current act and adds more protection for people’s personal information in California. It changes some of the rules in the California Consumer Privacy Act (CCPA) and creates a new agency to make sure that companies follow the rules. The CPRA was approved by voters in California in 2020 and has been enforced since 2023.


What Does The CPRA Mean For Businesses?

The adoption of CPRA has multiple implications for businesses:

  • Enhanced Consumer Rights: Consumers gain additional rights, including the right to correct inaccurate personal information and the right to limit the use of sensitive personal data.
  • New Regulatory Body: The establishment of the California Privacy Protection Agency means dedicated oversight and potential enforcement actions related to consumer privacy.
  • Increased Penalties: CPRA introduces steeper fines for violations, especially concerning minors’ data.
« Back to Glossary Index