California’s new privacy law, the CRPA, was approved: Now what?

On November 3, 2020, California voters passed Proposition 24, the California Privacy Rights Act (CPRA), by approximately 56-44%. This act will substantially amend the California Consumer Privacy Act (CCPA), once it goes into effect on January 1, 2023. Key points on this law: 

  • Builds on the existing framework of the CCPA, while bringing the CCPA closer to Europe’s GDPR;
  • imposes significant new obligations on businesses, which will require advance planning; and 
  • establishes the nation’s first agency dedicated to privacy regulation and enforcement, the California Privacy Protection Agency (CCPA).


We have outlined the CPRA’s key provisions in this Alert, and why it matters. As is often the case with privacy, the earlier the preparation, the easier the compliance.

Learn more.

Back to top