Who Is the CPRA Enforced By?

The CPRA is enforced by the California Attorney General's office, although it allows for private individuals to bring lawsuits in some circumstances. The California Privacy Protection Agency, once established, may also have some enforcement authority.

Does the CPRA Apply to Websites Outside of California or the U.S.?

Yes, any website operator that does business with at least 100,000 California residents and meets relevant income thresholds is subject to the CPRA.

What's the Difference Between the CPRA and GDPR?

The biggest difference between the CPRA and GDPR is the type of consent they enforce. California's law gives consumers the right to opt out, while the European Union's requires businesses to receive clear consent.

When Is the CPRA In Full Effect?

The CPRA has been in effect since January 1st, 2023 but will become fully enforceable as of July 1st, 2023.

Who Does the CPRA Protect?

The CPRA is meant to protect the personal information of California residents. This includes individuals who are employees, customers, clients, patients, or any other individuals who entrust their personal data to businesses operating in California.