What is CPRA and why does It matter?

The California Privacy Rights Act (CPRA) has to be viewed as an extension of its predecessor, California Consumer Privacy Act (CCPA) as it expands the scope and rights under the latter, making it more precise. Here’s a brief roundup of the key areas of difference between GDPR, CCPA and CPRA:

  1. Enforcement of the Law
  2. GDPR: The regional enforcement of GDPR takes places under the a DPA (Data Protection Authority) set up by each member state of the EU.
  3. CCPA: Under the office of California’s Attorney General.
  4. CPRA: An established CPPA (California Privacy Protection Agency) is vested with all administrative powers to implement the Act.
  • Scope and Applicability
  • GDPR: It has three kinds of scope:
    • Geographic: Protects individuals in the EU, including an outside company doing business in EU.
    • Type of data: It covers processing of personal data whether collected or processed.
    • Use of data: Applies to both data ‘controllers’ and ‘processors’
  • CCPA: It also applies in three contexts:
    • Individuals: All residents of California.
    • Businesses: Which have an annual gross revenue of more than $25 mn, holds consumer information of more than 50,000 individuals and derive 50% of their revenue from selling PI.
    • Use of data: All collection, processing and sale of PI.
  • CPRA: It has modified the breadth of CCPA’s scope for businesses in 3 ways:
    • The consumer PI threshold has been increased to 100,000 and now excludes device information from the scope of PI.
    • Now the 50% profit derived also applies in cases where the business shares PI.
    • 2 kinds of advertising recognised: “cross-context behavioural advertising” and “non-personalized advertising.”
  • Opt-in/Opt-out Restriction of Processing
  • GDPR: It requires explicit consent of the user through mechanisms like ‘accept cookies or other tracking technologies. Further, data subjects may request restrictions on the processing of PI if:
    • The data is inaccurate.
    • The processing is unlawful.
    • The controller no longer needs the PI for processing.
  • CCPA: The opt out requirement under CCPA is such that businesses have a ‘do not seek my personal information’ or ‘do not sell my info’ link. Such opt out only restricts the selling of data and not other uses. It also requires that opt outs have minimal steps and are easy for users.
  • CPRA: in addition to the CCPA, it adds a right to opt out of automated decision making technology, including ‘profiling’. Remarkably, opt out under CPRA is wider as:
    • Extends to sharing of PI.
    • Stricter opt in rights of minors
    • Opt in right for sharing of PI for behavioural advertising
  • Personal Data/Information
  • GDPR: Focuses on personal data belonging to an identifiable natural person, including publicly available data.
  • CCPA: Includes information that could be associated with a consumer or household. It emphasises on a ‘reasonable link’ between the PI and data subject. E.g. Info collected through a mobile application. Businesses should also provide just in time notices where a consumer would not reasonably expect collection of information.
  • CPRA: Adds ‘sensitive personal information’ as a new regulated dataset. It includes information like race, ethnicity etc.
  • Right to Erasure/ Deletion/ Correction/ Restriction
  • GDPR: These rights are applicable to all kinds of data. Some situations where such right arises are: the purpose of collection has ceased to exist, no legal ground for processing etc.
  • CCPA: It only applies to data directly collected from the consumer and not from third parties. Some exceptions to this right are when data is necessary to:
    • Comply with a legal obligation
    • Detect security incidents, fraudulent acts etc.
  • CPRA: In addition to the pre-existing framework, it has introduced:
    • Right to delete now extends to data collected from third parties as well.
    • Right to correction of inaccurate data added.
    • Right to restrict use and disclosure of sensitive PI for secondary purposes.
  • Right to Access/ Disclosure
  • GDPR: It requires businesses to inform the consumers of their rights. Data subjects also have a right to request access to their personal data and such request must be complied within a month.
  • CCPA: With disclosure rights similar to GDPR, it requires businesses to disclose requested data within 45 days, the data belonging to upto 12 months prior to the request is included.
  • CPRA: Allows consumers to make ‘access’ requests seeking meaningful information about automated decision making and the logic involved in its processes alongwith a description of the likely outcome based on that process.
  • Portability Requirement
  • GDPR: Data subjects have the right to request transmission of data to another controller without hindrance from the original controller.
  • CCPA: No explicit right to data portability but if a consumer requests, they have a right to receive their information in a readable format.
  • CPRA: Consumers may request that the business transmit specific pieces of PI to another entity, if its technically feasible.
  • Verification
  • GDPR: Does not prescribe specific requirements for identity verification.
  • CCPA: States that a business shall establish, document, and comply with a reasonable method for verifying that the person making a request is the consumer about whom the business has collected information.
  • High-Risk Assessment/DPIA
  • GDPR: Requires DPIAs for any processing likely to risk a data subject’s rights.
  • CCPA: Does not require a DPIA but a duty to implement and maintain reasonable security procedures.
  • CPRA: It requires businesses processing sensitive PII to:
    • Perform an independent cybersecurity audit on an annual basis.
    • Submit to the California Privacy Protection Agency on a regular basis a risk assessment with respect to their processing of PI and whether such processing includes sensitive PII.
  1. Limits on Data Collection/Processing/Storage
  2. Both GDPR and CPRA have three broad limitations which include:
    1. Data minimisation: Limits data collection to only what is required to fulfil a specific purpose.
    1. Purpose limitation: Personal data collected for one purpose should not be used for a new, incompatible purpose.
    1. Storage limitation: personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
  1. Penalties
  2. GDPR: National authorities assess fines that must be effective, proportionate, and dissuasive for each case. Fines can be up to 20 million euros, or up to 4% of the company’s total global turnover of the preceding fiscal year.
  3. CCPA: Penalties range from $2,500 for a nonintentional violation to $7,500 for an intentional violation. Finally, a business is not liable if its cures non-compliance within 20 days of the alleged violation.
  4. CPRA: Increases fines to $7,500 for each violation of CPRA involving personal information of consumers under the age of 16. It also eliminates the 30-day cure period.

(Summary)

Changes ahead of CPRA and how businesses can tackle them

  • What’s new for consumers and companies?

CPRA has dedicated a new government agency for the handling of enforcement and compliance of the new laws. A new agency dedicated to CCPA would mean:

  • Higher responsibility for companies
  • Makes service providers responsible for helping the companies with requests related to that information, such as deleting it.

Consumers also benefit as they can now update personal information that has been collected by a company.

  • What are the changes in kinds of data?

CPRA adds a subcategory called Sensitive Personal Information (SPI), which includes data like login credentials, race, ethnicity, biometric data and precise geolocation.

  • How can businesses ensure better compliance with CPRA?
  • Honour Opt ins and Opt outs: Ensure a uniform process to quickly address privacy requests and duly sought consent for processing any data.
  • Ensure compliance regardless of where you are located: CPRA applies to California residents, irrespective of where they are at a particular point of time. This means that if a California resident can access your website, you fall within the scope of CPRA.
  • Keep up to date with how PII standards change: Revisit how personally identifiable information is being used each time a privacy regulation change is announced.
  • Keep customers in the loop: Customers should regularly be made aware of how their data is being collected and used.
  • Who falls under its scope?

CPRA has modified the scope of CCPA as it applies to “businesses” which includes the following 4 categories:

  1. Directors of Processing

This simply means entities which direct the processing of personal information. To qualify as a business, an organisation must:

  • Be a legal entity operating for the benefit of its shareholders.
    • Collect personal information or have information collected on its behalf.
    • Determine the purposes of processing personal data
    • Meet one or more of the following criteria:
      • Have a gross annual revenue of $25,000,000 in the previous year.
      • Share the personal information of 1,00,000 or more consumers
      • Derive 50 per cent of its revenue from selling personal information.
  • Common Branding

Entities that control or are controlled by a business that directs the processing of personal information. To qualify, the potential business must:

  • Share common branding with the covered business and;
    • Receive personal information from the covered business for advertising purposes
  • Joint Ventures

The joint venture or partnership and each business that composes the entity are separately considered independent businesses. This implies that:

  • personal information in the possession of each business that is disclosed to the joint venture or partnership shall not be shared with the other business.
  • Certified Business

An entity that does business in California and voluntarily certifies to the Agency that it is in compliance with, and agrees to be bound by, the CPRA.

182 thoughts on “What is CPRA and why does It matter?”

  1. I loved as much as you will receive carried out right here The sketch is tasteful your authored subject matter stylish nonetheless you command get got an edginess over that you wish be delivering the following unwell unquestionably come further formerly again as exactly the same nearly very often inside case you shield this hike

  2. Magnificent beat I would like to apprentice while you amend your site how can i subscribe for a blog web site The account helped me a acceptable deal I had been a little bit acquainted of this your broadcast offered bright clear idea

  3. My brother suggested I might like this blog He was totally right This post actually made my day You can not imagine simply how much time I had spent for this info Thanks

  4. I have been browsing online more than three hours today yet I never found any interesting article like yours It is pretty worth enough for me In my view if all website owners and bloggers made good content as you did the internet will be a lot more useful than ever before

  5. I just could not depart your web site prior to suggesting that I really loved the usual info an individual supply in your visitors Is gonna be back regularly to check up on new posts

  6. certainly like your website but you need to take a look at the spelling on quite a few of your posts Many of them are rife with spelling problems and I find it very troublesome to inform the reality nevertheless I will definitely come back again

  7. Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?

  8. What i do not understood is in truth how you are not actually a lot more smartlyliked than you may be now You are very intelligent You realize therefore significantly in the case of this topic produced me individually imagine it from numerous numerous angles Its like men and women dont seem to be fascinated until it is one thing to do with Woman gaga Your own stuffs nice All the time care for it up

  9. Профессиональный сервисный центр по ремонту сотовых телефонов, смартфонов и мобильных устройств.
    Мы предлагаем: ремонт смартфонов в москве
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  10. Профессиональный сервисный центр по ремонту сотовых телефонов, смартфонов и мобильных устройств.
    Мы предлагаем: где можно починить телефон
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  11. Профессиональный сервисный центр по ремонту ноутбуков, макбуков и другой компьютерной техники.
    Мы предлагаем:ремонт macbook москва
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  12. BaddieHub I’m often to blogging and i really appreciate your content. The article has actually peaks my interest. I’m going to bookmark your web site and maintain checking for brand spanking new information.

  13. Профессиональный сервисный центр по ремонту радиоуправляемых устройства – квадрокоптеры, дроны, беспилостники в том числе Apple iPad.
    Мы предлагаем: сервис квадрокоптеров
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  14. Профессиональный сервисный центр по ремонту источников бесперебойного питания.
    Мы предлагаем: ремонт источников бесперебойного питания sven
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  15. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем:сервисные центры в екатеринбурге
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  16. Профессиональный сервисный центр по ремонту фото техники от зеркальных до цифровых фотоаппаратов.
    Мы предлагаем: ремонт затвора фотоаппарата
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  17. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем:ремонт крупногабаритной техники в новосибирске
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  18. Thanks I have just been looking for information about this subject for a long time and yours is the best Ive discovered till now However what in regards to the bottom line Are you certain in regards to the supply

  19. Профессиональный сервисный центр по ремонту стиральных машин с выездом на дом по Москве.
    Мы предлагаем: ремонт стиральных машин профи центр
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  20. I loved as much as youll receive carried out right here The sketch is tasteful your authored material stylish nonetheless you command get bought an nervousness over that you wish be delivering the following unwell unquestionably come more formerly again since exactly the same nearly a lot often inside case you shield this hike

  21. I loved as much as you will receive carried out right here The sketch is tasteful your authored subject matter stylish nonetheless you command get got an edginess over that you wish be delivering the following unwell unquestionably come further formerly again as exactly the same nearly very often inside case you shield this hike

  22. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: сервисные центры по ремонту техники в москве
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  23. Профессиональный сервисный центр по ремонту игровых консолей Sony Playstation, Xbox, PSP Vita с выездом на дом по Москве.
    Мы предлагаем: ремонт игровых консолей с гарантией
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  24. Профессиональный сервисный центр по ремонту фототехники в Москве.
    Мы предлагаем: ремонт фотовспышек
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!
    Подробнее на сайте сервисного центра remont-vspyshek-realm.ru

  25. livesport808
    Oh my goodness! Incredible article dude! Thank you so much, However I am experiencing
    difficulties with your RSS. I don’t understand the reason why
    I cannot join it. Is there anyone else having the
    same RSS problems? Anyone that knows the answer can you
    kindly respond? Thanks!!

  26. Профессиональный сервисный центр по ремонту фото техники от зеркальных до цифровых фотоаппаратов.
    Мы предлагаем: сервис по ремонту проекторов
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  27. Наткнулся на замечательный интернет-магазин, специализирующийся на раковинах и ваннах. Решил сделать ремонт в ванной комнате и искал качественную сантехнику по разумным ценам. В этом магазине нашёл всё, что нужно. Большой выбор раковин и ванн различных типов и дизайнов.
    Особенно понравилось, что они предлагают купить раковину в ванную комнату в москве. Цены доступные, а качество продукции отличное. Консультанты очень помогли с выбором, были вежливы и профессиональны. Доставка была оперативной, и установка прошла без нареканий. Очень доволен покупкой и сервисом, рекомендую!

  28. Недавно разбил экран своего телефона и обратился в этот сервисный центр. Ребята быстро и качественно починили устройство, теперь работает как новый. Очень рекомендую обратиться к ним за помощью. Вот ссылка на их сайт: ремонт телеф.

  29. ремонт кондиционеров

    <a href=”https://remont-kondicionerov-wik.ru”>ремонт кондиционеров на дому в москве</a>

  30. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: сервисные центры в нижнем новгороде
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  31. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: сервисные центры по ремонту техники в перми
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  32. Профессиональный сервисный центр по ремонту кнаручных часов от советских до швейцарских в Москве.
    Мы предлагаем: ремонт наручных часов
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  33. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: ремонт бытовой техники в красноярске
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  34. shinigami id shinigami id shinigami id shinigami id
    Nice blog here! Also your web site a lot up fast! What host are you the
    use of? Can I am getting your affiliate hyperlink for your host?
    I wish my site loaded up as quickly as yours lol

  35. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем:ремонт бытовой техники в ростове на дону
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  36. Usually I do not read article on blogs however I would like to say that this writeup very compelled me to take a look at and do it Your writing style has been amazed me Thank you very nice article

  37. Usually I do not read article on blogs however I would like to say that this writeup very compelled me to take a look at and do it Your writing style has been amazed me Thank you very nice article

  38. Thanks I have recently been looking for info about this subject for a while and yours is the greatest I have discovered so far However what in regards to the bottom line Are you certain in regards to the supply

  39. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: сервисные центры по ремонту техники в тюмени
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  40. Simply desire to say your article is as surprising The clearness in your post is simply excellent and i could assume you are an expert on this subject Fine with your permission let me to grab your feed to keep up to date with forthcoming post Thanks a million and please carry on the gratifying work

  41. Профессиональный сервисный центр по ремонту посудомоечных машин с выездом на дом в Москве.
    Мы предлагаем: срочный ремонт посудомоечных машин в москве
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  42. helloI really like your writing so a lot share we keep up a correspondence extra approximately your post on AOL I need an expert in this house to unravel my problem May be that is you Taking a look ahead to see you

  43. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: ремонт крупногабаритной техники в волгограде
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  44. texas88 texas88
    Heya i am for the first time here. I came across this board and I find It
    really useful & it helped me out a lot. I hope to give
    something back and help others like you helped me.

  45. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: сервисные центры по ремонту техники в воронеже
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  46. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем: ремонт крупногабаритной техники в челябинске
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

  47. Начните массовую индексацию ссылок в Google прямо cейчас!
    Быстрая индексация ссылок имеет ключевое значение для успеха вашего онлайн-бизнеса. Чем быстрее поисковые системы обнаружат и проиндексируют ваши ссылки, тем быстрее вы сможете привлечь новую аудиторию и повысить позиции вашего сайта в результатах поиска.
    Не теряйте времени! Начните пользоваться нашим сервисом для ускоренной индексации внешних ссылок в Google и Yandex. Зарегистрируйтесь сегодня и получите первые результаты уже завтра. Ваш успех в ваших руках!

  48. Wonderful beat I wish to apprentice while you amend your web site how could i subscribe for a blog web site The account aided me a acceptable deal I had been a little bit acquainted of this your broadcast provided bright clear idea

  49. Сломался телефон, думал покупать новый, но решил попробовать отремонтировать. Обратился в этот сервисный центр и не пожалел. Профессионалы своего дела быстро восстановили мой телефон. Рекомендую посетить их сайт: ремонт андроид.

  50. Today, while I was at work, my sister stole my iPad and tested
    to see if it can survive a twenty five foot drop, just so she can be a youtube sensation. My iPad
    is now destroyed and she has 83 views. I know this is completely off topic
    but I had to share it with someone!

  51. helloI like your writing very so much proportion we keep up a correspondence extra approximately your post on AOL I need an expert in this space to unravel my problem May be that is you Taking a look forward to see you

Leave a Reply

Your email address will not be published. Required fields are marked *