What is CPRA compliance?

What is CPRA compliance?

The CPRA allows consumers to opt out of the sharing of their personal information. The law defines data sharing as disclosing personal data to third parties for behavioral advertising.

Are non profits subject to CPRA?

What does CPRA mean for nonprofits? Although nonprofits are exempt from the provisions, it’s clear that when it comes to user data, there is a growing expectation that nonprofits must act as responsible stewards of their donor’s information. Nonprofits must respect donor intentions and privacy when requested.

What is difference between CCPA and CPRA?

Who enforces the CCPA and CPRA? The CCPA vests the California Attorney General with enforcement authority. Although the CPRA grants the California Privacy Protection Agency “full administrative power, authority, and jurisdiction to implement and enforce” the CCPA, the Attorney General still retains enforcement powers.


On November 4, 2020, the California Privacy Rights and Enforcement Act (CPRA) was passed by California voters. The CPRA replaces and amends several parts of the existing Act, the California Consumer Privacy Act (CCPA). The new Act will come into effect from January 1, 2023.

What are the CPRA exemptions for businesses?

The CPRA creates an exemption permitting a business to comply with proper direction from law enforcement agencies not to delete a consumer’s personal information for 90 days (plus a potential additional 90-day extension) in order to allow for a proper subpoena, order, or warrant to be obtained.

What are the CPRA amendments to the CCPA?

The CPRA significantly amends existing vendor contracting obligations under the CCPA. Pursuant to the CPRA amendments, a business is required to provide California residents with notice and the right to opt-out of two types of disclosures of personal information to third parties outlined below.

When does the CCPA/CPRA exemption expire?

The CPRA extended the date upon which the exemption was set to expire from January 1, 2021, to January 1, 2023. The California Legislature now has two years to decide whether B2B information will become subject to the CCPA/CPRA in their entirety, or whether an additional temporary or permanent exemption for B2B information is appropriate.

What are the exceptions to the CPRA deletion requirement?

The CPRA provides several new exceptions or clarifications to the deletion requirement. The business is not required to delete: Household data, defined as data relating to a group of consumers who cohabitate at the same residential address and share common devices or services.