The New CCPA has Passed in to Law. Now When Does it Take Effect?

Print Friendly, PDF & Email

Since 2018, businesses have been working diligently to hit the ever-moving target of California Consumer Privacy Act (“CCPA”) compliance. Just as the California Attorney General had begun CCPA enforcement, the State has now voted to approve Proposition 24, the California Privacy Rights Act (“CPRA”), to create what amounts to a new CCPA. Like the CCPA, the CPRA will go through a series of changes before its enforcement date. Notwithstanding the foregoing, businesses should begin to prepare for compliance implementation.

What is the CPRA timeline?

CCPA Compliance

Businesses that have not already become CCPA compliant should first focus their efforts on doing so. Getting CCPA compliant will help avoid becoming the subject of private rights of action and/or investigation by the California State Attorney General. Important compliance measures that are worth noting include: 1) implementing and posting a privacy policy that discloses the categories of consumers personal information collected, the sources from which such personal information is collected, and the commercial or business purpose for which the personal information was collected or sold; 2) providing consumers with appropriate forms related to the sale, collection and disclosure of personal information; and 3) supplying consumers with notice prior to or at the point of collection to inform consumers about the categories of personal information that the business collects and the purposes for which the information will be used.

Important CPRA Dates

The CPRA becomes effective five (5) days after the Secretary of State certifies the Proposition 24 approval vote which will occur on or before December 11, 2020. On January 1, 2023, the CPRA will become operative, and apply to consumer information collected on or after January 1, 2022.

In turn, the CPRA will become enforceable on July 1, 2023. Until July 1, 2023, the current CCPA will remain the governing law insofar as California consumer data privacy is concerned. Starting as early as July 1, 2021, the California Privacy Protection Agency (the “CPPA”), a new regulatory body created pursuant to the CPRA, can act on its rulemaking authority in order to adopt final regulations by July 1, 2022. Each rulemaking period will offer the opportunity for businesses to comment on new rules and attempt to shape the final construction of the CPRA.

Preparing for the New CCPA

Many businesses are frustrated by what seems like privacy regulations that are in a constant state of flux in California. This is, in large part, correct. Nevertheless, businesses must continue to preemptively address compliance measures in order to avoid enforcement action in the future. Data privacy is an active regulatory arena that will only continue to develop on a state and federal level. As such, working with experienced counsel to maintain compliance will help businesses make a smooth transition from the CCPA to the CPRA – the new CCPA.

If you require assistance with consumer data privacy compliance for your business, please email us at, or call us at (212) 246-0900.

The material contained herein is provided for informational purposes only and is not legal advice, nor is it a substitute for obtaining legal advice from an attorney. Each situation is unique, and you should not act or rely on any information contained herein without seeking the advice of an experienced attorney.

Attorney Advertising

Photo by Glenn Carstens-Peters on Unsplash

Related Blog Posts:

CCPA Opt-Out Changed?

CCPA Amendment Passes, Creating New HIPAA-related Exceptions

CCPA 2.0 on California’s November Ballot

David O. Klein

David O. Klein

David Klein is one of the most recognized attorneys in the telemarketing, technology, Internet marketing, sweepstakes and telecommunications fields. Skilled at counseling clients on a broad range of technology-related matters, David Klein has substantial experience in negotiating and drafting complex licensing, marketing and Internet agreements.

Schedule a Call
In The Know

Trending Topics

New York Sweepstakes Law blog- Klein Moynihan Turco

New York Sweepstakes Law: Are You Compliant?

Print Friendly, PDF & Email

In general, a lottery exists when entrants pay for the chance to win a prize. States alone reserve the right to administer lotteries. Businesses can eliminate one element of what would otherwise be an illegal lottery, in order to transform it into a legal promotional game. If the requirement to

TCPA surveys

An Ad or not an Ad: NY Weighs in on TCPA Surveys

Print Friendly, PDF & Email

Another day, another court decision that refines constitutes a Telephone Consumer Protection Act (“TCPA”) unsolicited fax advertisement. A Manhattan-based federal court recently issued a decision that removes faxed invitations to participate in a survey from the TCPA definition of advertisement. In drawing this distinction for TCPA surveys, the Court held

NY sports gambling law- Klein Moynihan Turco

Agreement Reached to Enact NY Sports Gambling Law

Print Friendly, PDF & Email

This week, Governor Andrew Cuomo and the New York State Legislature agreed to a budget deal that will bring mobile sports betting to the State through a unique NY sports gambling law.  Upon the Governor’s signature, NY sports gambling is primed to become the nation’s largest market. However, New York

UK and US Social Media Influencer Laws

UK and US Social Media Influencer Laws

Print Friendly, PDF & Email

In September of 2020, the United Kingdom’s (“UK”) Committee of Advertising Practice (“CAP”) reviewed the Instagram accounts of 122 UK-based social media influencers to determine whether content was being properly flagged as advertising in accordance with applicable social media influencer laws. This past March, the UK Advertising Standards Authority (“ASA”)

Running a Telemarketing Business?

Get a Free Compliance Review From an Experienced TCPA Lawyer.

Share on facebook
Share on google
Share on twitter
Share on linkedin