Data Strategy Briefing — California Privacy Rights Act takes effect
The California Privacy Rights Act became effective on 1 January 2023, expanding consumer rights and imposing new obligations on businesses and service providers ahead of enforcement by the CPPA.
The California Privacy Rights Act (CPRA) amendments to CCPA took effect on 1 January 2023, adding rights to correct personal information, expanding opt-outs to cross-context behavioral advertising, and introducing purpose limitation and data minimization duties. The law also created the California Privacy Protection Agency (CPPA) to enforce the statute and promulgate regulations.
Data leaders should update notices, records of processing, and service-provider contracts to reflect CPRA definitions, sensitive data handling, and the five new rights before the CPPA begins enforcement.
- CPPA enforcement readiness memo notes the 1 January 2023 effective date and outlines agency priorities.
- California Attorney General guidance summarizes business obligations and consumer rights under the CPRA amendments.
Continue in the Data Strategy pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Data Interoperability Engineering Guide — Zeph Tech
Engineer interoperable data exchanges that satisfy the EU Data Act, Data Governance Act, European Interoperability Framework, and ISO/IEC 19941 portability requirements.
-
Data Stewardship Operating Model Guide — Zeph Tech
Establish accountable data stewardship programmes that meet U.S. Evidence Act mandates, Canada’s Directive on Service and Digital, and OECD data governance principles while…
-
Data Strategy Operating Model Guide — Zeph Tech
Design a data strategy operating model that satisfies the EU Data Act, EU Data Governance Act, U.S. Evidence Act, and Singapore Digital Government policies with measurable…