Resource Center / Tools and Trackers / Summary of CPRA Contractual Obligations

Summary of CPRA Contractual Obligations

This chart provides a summary of the CPRA's contractual requirements.


Published: February 2021


Contributor:


Click to View (PDF)

The California Privacy Rights Act aims to provide a continuing level of protection for personal information as it flows from covered businesses to third parties, service providers, contractors, and even their sub-processors.

  • Outlining new contractual requirements to govern the sale, sharing, disclosure and receipt of personal information.
  • Placing direct enforceable obligations on service providers and contractors.
  • Mandating due diligence of processing operations.

This chart provides a summary of the CPRA's contractual requirements.