What is the California Privacy Rights Act?

The California Privacy Rights Act was designed to protect consumer privacy rights. It applies to individual residents of the state of California, but it does not protect non-residents, businesses, or other organizations.

What Does the CPRA do?

The CPRA expands the rights of California consumers and gives them more control over their personal data, including the right to opt-out of the sale of their personal information, the right to correct inaccurate personal information, the right to access the categories of personal information collected about them, the right to equal service and price, regardless of whether they exercise their privacy rights, and the right to know when their sensitive personal information is being collected.

Who must comply with the CPRA?

According to CPRA regulations, any organization that collects personal information from California residents, and meets the applicable criteria, must comply with the law. This includes organizations that are incorporated in other states or countries, even if they do not have a physical presence in California.

Get started today in 5 minutes

Organizations Required to Comply with CPRA

There are certain organizations that must comply with the CPRA.

>50% revenue from selling/sharing data

Organizations where 50% or more of their business revenue is from selling or sharing consumer data

100,000+ Customers

Organizations that buy, sell, or share information on 100,000 or more customers on an annual basis

$25 million+ in revenue

Organizations with $25 million or more in annual gross revenue

What is Required of Businesses?

The California Privacy Rights Act (CPRA) does more than just protect consumer rights, it also requires businesses to:

Here are some myths to look out for:

-
Have reasonable procedures in place to respond to consumer requests
-
Provide clear and conspicuous notice of their data practices
-
Provide enhanced security measures for data
-
Give consumers the ability to file complaints with the Attorney General of California if their rights are violated

See why 8,000+ businesses love EasyLlama

Learn about your CPRA requirements with EasyLlama training

Employees will be able to list the rights given to customers, the expectations made on businesses, the fines and penalties that could arise from disobeying the law, and best practices for adhering to the CPRA thanks to EasyLlama's fun and interactive CPRA training program. This training can be useful to any organization that collects personal information from citizens of California.

Helping over 8,000+ organizations create a safer, more inclusive company culture.

Get more from easyLlama

The Most Comprehensive online CPRA Training

Any organization that gathers personal data from California residents can benefit this course. The purpose is to educate employees to understand the regulations that govern how data is gathered, utilized, and shared in order to better advise them in protecting consumer data. The course covers: