Global Privacy Controls & the Road to CPRA

In November 2020, California voters enacted the California Privacy Rights Act (CPRA) by ballot initiative. The new law builds on the existing California Consumer Privacy Act of 2018 (CCPA), which provides consumers with rights to access, delete, and opt out of the sale of their personal information. The ballot initiative expands these rights and adds new obligations and limitations on how businesses can collect, use, and disclose California consumers’ personal information. The CPRA’s substantive provisions go into effect January 1, 2023.

A hallmark of the new CPRA is its expansion of consumer choices first introduced into law by the CCPA. Where the CCPA guaranteed a right to opt out of the sale of personal information, the CPRA adds a right to opt out of . . .