CPRA Into CPAA, California Privacy Upgraded

The CPRA introduces amendments to the CCPA of existing provisions of Title 1.81.5 of the California Civil Code (currently known as the CCPA and codified at Cal. Civ. Code § 1798.100 et seq) and adds new provisions (related to the establishment California Privacy Protection Agency). It is unclear, however, whether Title 1.81.5 will continue to be known as the CCPA or will instead be known as CPRA effective Jan. 1, 2023.

The CPRA took effect on Dec. 16, 2020, but most of the provisions revising the CCPA won’t become “operative” until Jan. 1, 2023.

Here is a diagram breaking down the two statutes and outlining how the CPRA expands the CPAA.


[For additional information, see Bloomberg Law\’s Glossary of Terms for Decoding CCPA/CPRA.]

The California Privacy Protection Agency is a new agency, created by the CPRA, which is vested with “full administrative power, authority, and jurisdiction to implement and enforce” the CCPA. The CPRA transfers rulemaking authority from the California Attorney General to the California Privacy Protection Agency effective July 1, 2021, with final CPRA regulations due by July 1, 2022.