California Consumer Privacy Resource Kit (CCPA and CPRA)

Summary

This resource kit provides an overview of the compliance obligations imposed by the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) regarding the collection, sale, sharing, use, and disclosure of consumers' personal information. In California, consumer data privacy is governed by the CCPA, which was signed into law on June 28, 2018. Its substantive privacy requirements became effective starting January 1, 2020, and were fully enforceable as of July 1, 2020. On November 3, 2020, California voters approved Proposition 24, which enacted the CPRA. The CPRA amended and expanded the CCPA. It went into effect on January 1, 2023, and became enforceable on July 1, 2023. However, enforcement of the new CPRA regulations that were finalized on March 29, 2023, has been delayed by court order until March 29, 2024. This resource kit includes Practical Guidance resources covering initial considerations, consumer rights, privacy policy requirements, ...