The California Privacy Rights Act (CPRA) – An implementation and compliance guide

CHAPTER 1: CPRA JURISDICTION – TERRITORIAL

Relevant provisions of the California Civil Code that collectively make up the California Privacy Rights Act (CPRA) consistently refer to the rights of consumers as they apply to a “business.” For example, “A consumer shall have the right to request that a business that collects a consumer’s personal information disclose” certain things to that consumer.²⁰ Or, “A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.”²¹ As a result, the law’s applicability hinges on key definitions of a “business,” and, like all laws, organizations will need to carefully review definitions and terms to determine which ...