Key aspects of the California Privacy Rights Act (CRPA)
Key aspects of the California Privacy Rights Act (CRPA)
https://legal.thomsonreuters.com/blog/key-aspects-of-california-privacy-rights-act-cpra/
Publish Date: 2026-02-06 15:09:00
Source Domain: legal.thomsonreuters.com
Key aspects of the California Consumer Privacy Act (CCPA) for legal professionals
California law · California Privacy Rights Act
Highlights
- CPRA extended California’s privacy law, adding sensitive personal information protections and consumer rights.
- Businesses must comply with expanded obligations including data correction, portability, and automated decision-making transparency.
- California Privacy Protection Agency enforces the law through investigations and collaboration with regulators.
Voters approved the California Privacy Rights Act (CPRA) in November 2020. The CPRA extended and strengthened the California Consumer Privacy Act of 2018 (CCPA), a groundbreaking law that had taken effect less than a year before. The privacy law is still generally referred to as the CCPA because the CPRA didn’t create a new law or replace the CCPA. The CPRA amendments took effect in March 2023.
Weighing in at 34 pages, the CPRA changes are extensive. They include additional rights for consumers and new obligations for businesses. A notable CPRA change is the creation of the California Privacy Protection Agency (CPPA) that’s responsible for implementing and enforcing the law.
Jump to ↓
What does the California Privacy Rights Act protect?
Who must comply with the California Privacy Rights Act?
Consumer rights under the California Privacy Rights Act
Business obligations under the California Privacy Rights Act
CPRA enforcement
CPRA private right of action
Recent updates
What does the California Privacy Rights Act protect?
The CCPA protects the privacy rights of California consumers, granting them various rights to their personal information that businesses collect. These include the right to:
- Know about personal information that businesses collect from them
- Know how that information is used and shared
- Delete the information (with some exceptions)
- Opt out of the sale and sharing of the information
- Exercise their CCPA rights without facing discrimination
The CPRA added a new category —…
