The California Privacy Rights Act of 2020 (CPRA), also known as CCPA 2.0, was approved by California voters on November 3, 2020. The new law builds on CCPA and forecasts an even stricter regulatory data privacy environment for businesses. Please join Bradley cybersecurity and privacy attorneys Erin Illman, Junaid Odubeko, and Steve Snyder for a discussion of areas that companies need to address before CPRA goes into effect. Discussion topics will include:

• How CPRA builds on CCPA’s framework and puts us closer to GDPR
• Expanded consumer rights and business obligations under CPRA
• CPRA’s impact on technology and automation

Please prepare your beverage of choice, and join us to discuss how we can prepare companies for a second wave of data privacy regulatory enforcement from the Golden State.

Webinar Recording

Key Takeaways

• CPRA adds new consumer rights and business operational requirements to those covered by CCPA
• The deadline for the new agency to adopt final regulations implementing the CPRA is July 1, 2022, and enforcement may begin July 1, 2023
• Companies should take these steps for proactive CPRA compliance:
1. Assess if your business meets new thresholds
2. Determine if your business collects sensitive personal information
3. Amend service provider agreements and update templates
4. Update your data retention policy
5. Analyze how new privacy rights affect your business
6. Determine if your business is a “high risk data processor”