CCPA Regulations vs CPRA: How Are They Different?

The CCPA (California Consumer Privacy Act), which is also known as the ccpa regulations, and the CPRA (california privacy rights act), are having a very huge effect on the privacy and data security sector. 

These two acts are changing the way companies do business, yet, a lot of people do not know how these two are different.

To help you out in properly understanding what CCPA and CPRA are, we are going to answer some of the most common questions that people have about the California Consumer Privacy Act and the California Privacy Rights Act. 

What Is The CCPA? 

The CCPA (California Consumer Privacy Act) was signed into law on June 28 of 2018 and went into effect on January 1 of 2020. This act created multiple consumer privacy rights and business obligations when it comes to businesses and organizations collecting and selling personal information. 

What Is The CPRA? 

The CPRA (California Privacy Rights Act), which is sometimes called Proposition 24, is a ballot measure that was approved by the voters of California on November 3 of 2020. This act amends and expands the CCPA (California Consumer Privacy Act). 

What Rights Do Consumers Have Under California Consumer Privacy Act and the California Privacy Rights Act? 

The CCPA (California Consumer Privacy Act) created 6 rights for the residents of California. 

Here are the 6 rights: 

• The right to opt-in to the sale of personal information of consumers that are under 16 years old 
• The right to initiate a private cause of action in case a data breach happens 
• The right to opt-out of the sale of personal information 
• Residents of California have the right to request disclosure of personal information that was collected by a business. Not only that, but the residents have the ability to know from whom they got the data from, why the data got collected, and if they sold the data.
• The people of California get the right to delete personal information that got collected by a business or organization
• The right to non-discriminatory treatment if they decided to exercise their rights

The CPRA (California Privacy Rights Act) added 2 additional rights to the CCPA:

Here are the 2 additional rights: 

• The CPRA added the right to correct inaccurate personal information about a person living in California.
• The CPRA added the right to limit use and disclosure of personal information about a person living in California. 

Who Is Required To Comply With CCPA? 

All companies that serve the residents of California and have $25,000,000 (USD) in annual revenue are required to comply with the CCPA (California Consumer Privacy Act). Not only that, but companies of any size that have collected the personal data and information of at least 50,000 people or have collected more than half of their revenue from the sale of personal data are required to comply with the California Consumer Privacy Act.

Who Is Required to Comply With The CPRA? 

The California Privacy Rights Act has made a lot of changes in the threshold for businesses or organizations that collect, purchase, receive, sell, or share the personal data of a minimum 50,000 or more consumers, households, and devices on a yearly basis. Any business in California that collects personal information of 100,000 consumers or households each year are required to comply with this act.