As final CPRA rules trickle out, a reminder companies must ‘grow with the law’

California issued its first batch of final rules to implement the sweeping California Privacy Rights Act (CPRA), with the remainder of the rules expected to be released within months, the California Privacy Protection Agency (CPPA) said.

The landmark CPRA, considered the toughest consumer privacy law in the nation, was approved by ballot initiative in 2020 as an amendment that overhauls the 2018 California Consumer Privacy Act (CCPA).

The CPRA gives California consumers and employees more rights to safeguard their personal data from businesses that may want to collect, store, share, or sell the data. The rules offer extra protection to consumers when their sensitive information, such as Social Security numbers and geolocation data, is involved.