How Does the CPRA Compare to the GDPR? Ask a CPRA Lawyer

CPRA lawyer
Print Friendly, PDF & Email

On election day, California State voters passed Proposition 24, the California Privacy Rights Act (“CPRA”), a measure that strengthens consumer data privacy rights that were originally created by the California Consumer Privacy Act (“CCPA”). The amendments to the CCPA implement a regulatory framework that is, in some respects, closer aligned with that of the European Union’s (“EU”) General Data Protection Regulation (“GDPR”). With the passage of these additional California State consumer data restrictions, businesses should work with a CPRA lawyer to help navigate their compliance obligations. Failure to do so may result in private rights of action and/or investigations by California’s State Attorney General.

What are the similarities between the CPRA and GDPR?

CPRA Trending Toward GDPR Principles

In 2016, the GDPR was passed into law with the purpose of affording individuals the right to restrict the use of their personal data through a uniform standard of protection across the EU. In 2018, California enacted the CCPA to enhance consumer data privacy rights for California State residents. The recently passed CPRA amendments to the CCPA bring California’s data privacy law closer to the protections created under the GDPR. Important similarities between the CPRA and GDPR include:

  • The CPRA and GDPR both afford consumers the right to rectify inaccurate personal data points that companies have collected about them.
  • The CPRA mirrors the GDPR insofar as data minimization and retention matters are concerned. Specifically, the CPRA explains that “a business shall not retain a consumer’s personal information . . . for longer than is reasonably necessary for that disclosed purpose.” In turn, the GDPR provides that businesses cannot retain personal data for “longer than is necessary for the purposes for which the personal data are processed.”
  • The CPRA transfers enforcement of data privacy compliance from the California Department of Justice to the newly-enacted California Privacy Protection Agency (“CPPA”). The CPPA will be comprised of a five-member board “with full administrative power, authority, and jurisdiction to implement and enforce the [CCPA].” Similarly, the GDPR required each member state to designate a supervisory authority to oversee the application of the GDPR within the applicable jurisdiction of each member state.
  • The CPRA creates a new “Sensitive Personal Information” category that aligns with the GDPR’s tiers of personal information. Information such as religious beliefs, racial and ethnic origin, and geolocation will now receive heightened protection under the CCPA.

Hiring a CPRA Lawyer

The CPRA will become effective on or before December 11, 2020. However, please note that California is not due to begin enforcing the CPRA until July 1, 2023. In the interim, it is imperative that businesses now follow existing CCPA requirements and begin working toward compliance with the CPRA in the near future. A CPRA lawyer can help businesses comply with California State consumer data privacy law mandates with the goal of avoiding regulatory investigation and costly civil penalties.

If you require assistance with consumer data privacy compliance for your business, please email us at, or call us at (212) 246-0900.

The material contained herein is provided for informational purposes only and is not legal advice, nor is it a substitute for obtaining legal advice from an attorney. Each situation is unique, and you should not act or rely on any information contained herein without seeking the advice of an experienced attorney.

Attorney Advertising

Photo by Sebastian Pichler on Unsplash

Related Blog Posts:

Voters Approve Amendment to CCPA Law

CCPA Amendment Passes, Creating New HIPAA-related Exceptions

Clarifying the $25 Million Threshold in the Final CCPA Regulations

David O. Klein

David O. Klein

David Klein is one of the most recognized attorneys in the telemarketing, technology, Internet marketing, sweepstakes and telecommunications fields. Skilled at counseling clients on a broad range of technology-related matters, David Klein has substantial experience in negotiating and drafting complex licensing, marketing and Internet agreements.

Schedule a Call
In The Know

Trending Topics

Creating a Viral and Legally Compliant "Pin to Win" Contest- Klein Moynihan Turco

Creating a Viral (And Legally Compliant) “Pin to Win” Contest

Print Friendly, PDF & Email

We have frequently written about the marketing benefits associated with the use of promotional contests and sweepstakes.  Promotional contests and sweepstakes often appear on social media platforms, which provide companies with a free and effective means to increase the number of consumers participating in their respective contests. While companies must

Facebook Decision defines a TCPA Autodialer- Klein Moynihan Turco LLP

Facebook Aftermath: Courts Clarify Definition of TCPA Autodialer

Print Friendly, PDF & Email

On April 1st, the U.S. Supreme Court released its opinion in Facebook, Inc. v. Duguid, marking a newly clarified definition of “autodialer” within the meaning of the Telephone Consumer Protection Act (“TCPA”). In the two weeks that followed, two federal courts have directly addressed the definition of TCPA autodialer as

Critical Role that TCPA Plays in Outbound Telemarketing- KMT

The Critical Role that the TCPA Plays in Outbound Telemarketing

Print Friendly, PDF & Email

If you’re running any sort of outbound telemarketing campaign – phone calls, voicemail drops, or text messaging – you need to understand the Telephone Consumer Protection Act (TCPA) and its enabling regulations. Call center operators are not the only businesses that employ outbound telemarketing to reach out to consumers. Using

How to Use Promotional Marketing the Legal Way: Klein Moynihan Turco LLP

How To Use Promotional Marketing The Legal Way

Print Friendly, PDF & Email

The use of promotional contests, games and sweepstakes marketing can be a dynamic and cost-effective way to increase sales, build a database of interested consumers and otherwise increase brand awareness and buzz. Consumers are more easily attracted to your marketing message by the opportunity to win prizes than with more

Share on facebook
Share on google
Share on twitter
Share on linkedin