California Consumer Privacy Resource Kit (CCPA and CPRA)

Summary

This resource kit provides an overview of the compliance obligations imposed by the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) regarding the collection, sale, sharing, use, and disclosure of consumers' personal information. In California, consumer data privacy is governed by the CCPA, which was signed into law on June 28, 2018. Its substantive privacy requirements became effective starting January 1, 2020, and were fully enforceable as of July 1, 2020. On November 3, 2020, California voters approved Proposition 24, which enacted the CPRA. The CPRA amended and expanded the CCPA. It went into effect on January 1, 2023, and became enforceable on July 1, 2023. This resource kit includes Practical Guidance resources covering initial considerations, consumer rights, privacy policy requirements, and employer obligations, including detailed practice notes, templates, clauses, and checklists.