Data privacy has become a top concern for consumers worldwide, leading to increased scrutiny and regulation of how companies collect and use personal information. In the US, California has been leading the charge in this area, with the California Consumer Privacy Act (CCPA) of 2018 setting a precedent for other states to follow.
Now, the state has taken another step forward with the California Privacy Rights Act (CPRA), which will go into effect in January 2022.
The CPRA builds upon the CCPA, expanding consumer rights and giving employees more control over how their personal information is used.
It also introduces a new definition for sensitive personal information, aligning California's laws more closely with the European Union's General Data Protection Regulation (GDPR).
Here are some of the key points of the CPRA:
Consumers have the right to ask businesses to disclose the categories and details of personal information collected about them.
Businesses must inform consumers, at or before the point of collection, about the categories of personal information that will be collected and the purposes for which it will be used.
Businesses cannot collect additional categories of personal information or use collected personal information for additional purposes without providing consumers with notice.
Consumers have the right to request the deletion of all personal information that a business has collected about them.
Businesses must disclose the categories of personal information collected, the sources from which it is collected, the purpose for collecting or selling it, and the categories of third parties with whom it is shared.
Consumers have the right to opt-out of the sale of their personal information.
Businesses cannot discriminate against consumers who exercise their privacy rights.
Privacy policies must include a list of the categories of personal information sold in the previous 12 months, an explanation of consumers' rights, and a link to the "Don't Sell My Personal Information" webpage.
The CPRA aims to provide California consumers with more control over their personal information and ensure that businesses are transparent about their data collection practices. It also serves as a model for federal privacy laws, with the proposed American Data Privacy and Protection Act (ADPPA) taking a similar starting point.
As companies navigate the new regulations, it's important to ensure compliance with the CPRA and prioritize data privacy to build trust with consumers.
Comments