Top-10 operational impacts of the CPRA

Last Updated: March 9, 2021

This is a 10-part series intended to help privacy professionals understand the operational impacts of the California Privacy Rights Act, including how it amends the current rights and obligations established by the California Consumer Privacy Act.

Contributors

 

 

 

 

 

View contributors

Part 1: The California Privacy Protection Agency
Author: IAPP Legal Research Fellow Cathy Cosgrove
Part one of the series explores the new California regulator’s potential structure, authority and approach provided under the law.


Part 2: Defining 'business' under the law
Author: IAPP Legal Research Fellow Cathy Cosgrove
Part two of the series breaks down the definitions of "business" under both California laws.


Part 3: Right to correct and treatment of sensitive personal data
Author: IAPP Legal Extern Anna Daniels
Part three looks at two new rights under the CPRA: the right to correct inaccurate personal information and the right to limit the use of "sensitive personal information."


Part 4: Other expanded rights and obligations
Author: IAPP Westin Research Fellow Nicole Sakin
Part four looks at other new rights and obligations included in the CPRA, like data minimization and data retention.


Part 5: Notice obligations and the right to opt-out
Author: IAPP Westin Research Fellow Sarah Rippy
Part five explores how the notice and opt-out requirements will evolve from the CCPA to the CPRA.


Part 6: Service providers, contractors and third parties
Author: IAPP Research Director Caitlin Fennessy, CIPP/US
Part six breaks down how the CPRA helps organizations safeguard information when it arrives with third parties and the contractual requirements third parties, service providers and contractors must follow under the law.


Part 7: Response to consumers requests to know
Author: IAPP Senior Westin Research Fellow Müge Fazlioglu, CIPP/E, CIPP/US
Part seven focuses on how businesses should respond to consumer requests to know what personal information businesses are collecting, selling, or sharing, and with whom.


Part 8: Rights to delete, no retaliation and children's privacy
Author: IAPP Senior Westin Research Fellow Müge Fazlioglu, CIPP/E, CIPP/US
Part eight turns to other consumer rights expanded upon by CPRA: the rights to deletion, no retaliation and children’s privacy.


Part 9: Scope and potential impact of the regulations to be adopted
Author: IAPP Legal Research Fellow Cathy Cosgrove
Part nine focuses on the significant regulations anticipated by the CPRA. The broad scope of this rulemaking is likely to further shape interpretation of the CPRA and impact compliance.


Part 10: Enforcement and potential penalties
Author: IAPP Legal Research Fellow Cathy Cosgrove
Part ten of the series focuses on the law's enforcement mechanisms and potential penalties.