Are you a California resident? If you are, then the CPRA is something you should be concerned about. Especially if you want to open up a business there and collect sensitive information from your consumers.<\/p>\n
Like the GDPR, the CPRA was created to set standards for the United States, and avoid misunderstanding and misuse of consumers’ personal data. Moreover, even though the CPRA won\u2019t be enforceable until the beginning of 2023, any type of data collected after January 1st, 2022, is subject to the CPRA.<\/p>\n
There are many things to learn about the CPRA, and we have much more to tell you. So don\u2019t go anywhere because, in this article, we will intensely discuss the CPRA.<\/p>\n
Companies that are operating in California or collect personal information from California residents, regardless if it\u2019s for marketing purposes or not, are subject to CPRA if it:<\/p>\n
A significant change that has been made from the CCPA to the CPRA is to remove the requirement of using personal information only for marketing purposes. So now, even if the company isn\u2019t profiting from consumers\u2019 personal information, you are still required to comply with the law.<\/p>\n
CPRA compliance is quite interesting because if you are a small or medium-sized business, you may not have to comply with the CPRA but rather with the CCPA. Initially, you have to identify if your business should comply with the CCPA or the CPRA. Many think they\u2019re both the same, but the truth is that they have some key differences. Comparatively, the CPRA loosens many restrictions the CCPA has, whereas some small and mid-sized businesses don\u2019t fall under the compliance of the CPRA. However, at the same time, it strengthens many weaknesses of the CCPA as well.<\/p>\n
Note: If you\u2019re interested in learning about the CPRA, you can read more on Osano’s website<\/a>.<\/i><\/p>\n The CPRA is considered an amendment of the CCPA by offering a GDPR approach, expanding individual rights, and much more. Here are the two major differences between the two:<\/p>\n The CPRA also included the creation of the Californian Privacy Protection Agency (CaIPPA), a dedicated privacy agency that five board members govern. These members have to be experts in privacy, consumer rights, and technology. Otherwise, they aren\u2019t able to qualify. Additionally, they can serve no more than eight years within the privacy agency.<\/p>\n Following the CCPA, individuals can only request access to their personal data for one year from when it was stored and collected. However, with the CPRA, you have the right anytime you wish to do so.<\/p>\n Moreover, when the CCPA defines \u201cselling,\u201d it doesn\u2019t precisely mean sharing. On the other hand, the CPRA includes \u201cSell\u201d and \u201cShare.\u201d Additionally, the CPRA clarifies the right to stop (opt-out) businesses from sharing and selling their personal information<\/a> to other parties.<\/p>\n Finally, let\u2019s not forget that both the CCPA and CPRA allow companies to be sued. Consumers can do this should a company expose sensitive information without authority, and cause data breaches that reveal passwords and usernames.<\/p>\n New amendments have been made both to the CPRA and the CCPA in order to include new rights that businesses are obliged to comply with. Why so? According to SalesForce, about 46% of consumers<\/b> feel they don\u2019t have enough control over their private data. Sadly, only 10%<\/b> think they have enough control over their personal data.<\/p>\n Nevertheless, businesses that violate these laws will face huge fines of thousands of dollars and be sued for intentional private data violations.<\/p>\n Now, let\u2019s clarify a few important things here. First, when you are a business, under the CPRA, you are obliged to explain why you are collecting personal information and who you are sharing the information with. However, under the CCPA, you have the right to ask why your personal data is being collected. Moreover, people have the right to inform businesses of inaccurate information or if any amendments need to be made.<\/p>\n Under the CPRA, consumers have more rights. This includes gaining knowledge of where their information is being used, and how to correct inaccurate information that they may see.<\/p>\n Here are a few things your business can apply to adapt to these regulations:<\/p>\nWhat are the differences between the CCPA and CPRA?<\/h3>\n
\n
Amendments<\/h4>\n
What\u2019s new with the CPRA, and how does it impact your business?<\/h3>\n