November 5, 2020
California’s Prop 24, the “California Privacy Rights Act,” Passed. What’s Next?
Among the consequential results of the recent national election is one that will affect privacy of personal information for residents of California in the near term and, perhaps, all United States residents further down the road. California Proposition 24, the California Privacy Rights Act (CPRA), passed with over 56% of the vote. The Act is intended to clarify and strengthen the California Consumer Privacy Act (CCPA) which began enforcement in January of this year. Specifically, CPRA will expand consumer's rights to opt-out of data sharing, provide expanded access to collected personal information, and improve rights to correct information and limit its use. It imposes new obligations on businesses to minimize data collected and to limit its uses, and provides for additional notification requirements about what data is being collected and how it is being used. As CPRA brings California law into a closer alignment with GDPR, many privacy experts expect that it will be seen as a significant model for a more comprehensive federal law.