CCPA and CPRA

 

Resource Center / Topic Pages / CCPA and CPRA

Image

CCPA and CPRA

TOPIC PAGE

Navigate Page

This topic page contains a curation of the IAPP’s coverage, analysis and relevant resources regarding the California Consumer Privacy Act and California Privacy Rights Act.

In June 2018, the CCPA was signed into law, creating new privacy rights for Californians and significant new data protection obligations for businesses. The CCPA went into effect Jan. 1, 2020. California’s Office of the Attorney General has enforcement authority.

The CPRA, a ballot initiative that amends the CCPA and includes additional privacy protections for consumers passed in Nov. 2020.

The CPRA established the California Privacy Protection Agency to implement and enforce the law. The Attorney General also retains civil enforcement authority.

  • expand_more

    California Privacy Law
    This IAPP textbook provides practical guidance and in-depth information to navigate California’s strict policies.
    View here

    Implementing the CCPA: A Guide for Global Business
    This IAPP textbook assists in leading a business’s CCPA efforts and handling what is necessary to comply.
    View here

  • expand_more

  • expand_more


News Articles

View all News Articles

4 critical compliance areas companies should review after CPPA’s Honda settlement


Preparing for compliance: Key differences between EU, Chinese AI regulations


CPPA Board approves data broker regulations


CPPA to initiate formal ADMT rulemaking process as executive director set to depart


CPPA to conduct data broker registry sweep


Brain power: Piecing together the CCPA’s opt-in, -out requirements for sensitive personal information


Questions of scope, impact delay CPPA formal ADMT rulemaking


IAPP GPS 2024: CPPA’s Soltani details agency’s packed agenda


CPPA issues first enforcement advisory


After contentious meeting, CPPA moves ADMT rules forward


State appeals court rules first CPRA regulations enforceable


California proposes CCPA children’s privacy gap fix


CPPA releases initial automated decision-making rules proposal


CPPA debuts new CPRA complaint form


Court decision pushes CPRA regulations enforcement to March 2024


CCPA enforcers emphasize compliance, downplay federal preemption


Proposed CPRA regulations finalized; CPPA targets April effective date


CPPA anticipates final CPRA regulations will be effective by April


Cross-context behavioral advertising is ‘sale.’ It is time to get over it.


Home stretch: Finalization of CPRA regulations draws closer


CCPA enforcement action: A case study at the intersection of privacy and marketing


California attorney general announces first CCPA enforcement action


CPPA board moves CPRA rulemaking process forward


Privacy pros take stock of surprise CPRA draft regulations


CPPA board charts course for CPRA rulemaking


CPRA regulations delayed past July 1 deadline, expected Q3 or Q4


Brace for impact: PSR21 workshop focuses on CPRA considerations


FTC alum Ashkan Soltani selected to lead CPPA


CPRA could obstruct existing employment rights


Top-10 takeaways from the California AG’s CCPA enforcement case examples


California attorney general offers CCPA enforcement update, launches reporting tool


What the CPPA’s appointments say about enforcement priorities, strategy


Analyzing the CPRA’s new contractual requirements for transfers of personal information


New CCPA regulatory provisions seek to clarify business requirements


Ambiguity in CPRA imperils content intended for underrepresented communities


New categories, new rights: The CPRA’s opt-out provision for sensitive data


Top-10 operational impacts of the CPRA: Part 2 – Defining ‘business’ under the law


Prop 24 passes in Calif., paving way for CPRA


CCPA, CPRA’s hidden ‘third party business’ classification


Whether yes or no, the stakes are high for Calif.’s Prop 24


Data brokers: A preview of the new edition of ‘California Privacy Law’


CCPA update: Calif. attorney general comments, new amendments signed into law


Benchmarking CCPA-related data subject requests


What does the CCPA’s ‘purpose limitation’ mean for businesses?


The CCPA dog that didn’t bark: B2B and employee moratoria extended one year


CCPA final regulations in effect, includes some changes


CPRA promises short-term consumer benefits, long-term uncertainty


CCPA draft regulations: Privacy notices and accessibility in the employment context


The new CCPA draft regulations: Identity verification


Will CPRA prevail on November 3?


At Calif. hearing, critics question CPRA’s timing


Becerra submits CCPA final regs, awaits approval to enforce


CPRA initiative moves to sampling, CCPA regs likely delayed


Study highlights data subject request volume, spending under CCPA


CPRA analysis: The ‘good’ and ‘bad’ news for CCPA-regulated ‘businesses’


Are IP addresses ‘personal information’ under CCPA?


California attorney general’s office: No delay on CCPA enforcement amid COVID-19


Are companies using semantics to get around CCPA’s ‘sale’ provision?


How the CCPA impacts civil litigation


With the CCPA now in effect, will other states follow?


What you must know about ‘third parties’ under GDPR and CCPA


Platform helps organizations take deep dives into GDPR, CCPA


Critics say attorney general’s proposed CCPA regulations add confusion, not clarity


Critics say attorney general’s proposed CCPA regulations add confusion, not clarity


One law firm’s take on the new draft CCPA regulations


GDPR and CCPA: A compatibility story


On keynote stage, Mactaggart addresses his ‘new’ CCPA


CCPA exemption adds compliance considerations for bank CPOs


Aiming for CCPA compliance? Define those vendor relationships


A look at the latest CCPA amendment updates


CCPA amendment update: Changes to technical corrections and loyalty programs bills


Navigating disclosures and sales of personal information under the CCPA


A close-up on deidentified data under CCPA


What one CCPA co-architect will watch closely with Sacramento back in session


Service allows companies to set up toll number ahead of CCPA


CCPA update: Senate committee pares back amendments


Does the CCPA regulate internal transfers?


Preparing for CCPA: Start benchmarking now


A data processing addendum for the CCPA?


Comparing Maine and Nevada’s new privacy laws with the CCPA


Encryption, redaction and the CCPA


Global Privacy Summit dispatch: How to leverage GDPR work for CCPA compliance


Financial privacy pros look back on GDPR, forward to CCPA


California lawmakers smooth over some of the CCPA’s rough edges


This assessment tool aims to help determine CCPA readiness


What does the CCPA mean for colleges and universities?


At Calif. Assembly hearing, lawmakers seek input on CCPA


Will the CCPA’s originators regret their deal with the Calif. legislature?


GDPR matchup: The California Consumer Privacy Act 2018


Paging all health care privacy pros: CCPA deserves your attention despite HIPAA exemption


New California privacy law to affect more than half a million US companies


Analysis: The California Consumer Privacy Act of 2018


View More


Back to Top