CPRA
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
CPRA - The California Privacy Rights Act, a ballot initiative that passed in late 2020, amended and extended the CCPA, and became effective January 1, 2023.
In the CIPP/US body of knowledge, CPRA comes up under Chapter 2: U.S. Legal Framework; Chapter 6: State Comprehensive Privacy Laws; Chapter 7: State Data Breach Notification, Data Security, and Data Destruction Laws.
CPRA in context
- Market and regulatory changes are shrinking this: the ==CPRA (effective January 2023) requires notice and an opt-out for third-party cookies==, and Edge, Firefox, and Safari blocked them by default by end of 2022. (Third-Party Data Collection and the Decline of Third-Party Cookies)
- state to pass a comprehensive privacy law: the ==CCPA (enacted 2018, effective Jan 1, 2020)==, later amended and extended by the ==CPRA (passed late 2020, effective Jan 1, 2023)==, which also created the ==CPPA==. (California as First Mover - CCPA and CPRA)
- Enacted via the ==CCPA==, updated by the ==CPRA==. (California Statutory Damages (CCPA/CPRA))
Where CPRA is covered in the CIPP/US study notes
- Federal and State Regulatory Authorities for Private-Sector Privacy
- California as First Mover - CCPA and CPRA
- California Statutory Damages (CCPA/CPRA)
Related terms
- FTC
- State attorney general
- CPPA
- HHS Office of Civil Rights
- CCPA
- DPA
- Statutory damages
- 30-day cure period
Test yourself on CPRA
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.