Last Updated: June 2023
The California Consumer Privacy Act went into effect Jan. 1, 2020, and enforcement by California’s Office of the Attorney General began July 1, 2020. The California Privacy Rights Act ballot initiative passed in November 2020, with the majority of its provisions becoming operative Jan. 1, 2023.
Bills pending in the California legislature would impact organizations’ data practices and understanding of the laws, whether through direct amendments to the CCPA and/or the CPRA or proposed legislation related to the collection or sharing of personal information, including platform liability. Notably, this tracker does not include every sectoral data privacy law, rather, it highlights any California comprehensive data law with potential privacy implications across sectors.
The tracker includes a hyperlinked bill number and a brief summary of the proposed legislation, as well as its status and last legislative action.
Notes:
- The information in the tracker is from the California Legislative Information website and each bill is hyperlinked to the specific bill information.
- 17 Feb. 17, 2023 was the last day for bills to be introduced.
- 14 Sept. 2023 is the last day for bills to be passed in each house.
- 14 Oct. 2023 is the last day for the governor to sign or veto bills passed by the legislature.
- For more details on important dates, view the California Legislative Calendar & Deadlines.
We will continue to update this tracker as there is new activity and welcome the assistance of IAPP members. Please let us know at research@iapp.org if there are additional CCPA- and/or CPRA-related bills we should be following.
