California Privacy Rights Act (CPRA)

The California Privacy Rights Act (CPRA) will now be enforced immediately, rather than waiting until March 29, 2024. The CPRA prohibits dark patterns, especially for consent, and any behavior that substantially subverting or impairing user autonomy, decisionmaking, or choice. Businesses need to comply with existing regulations associated with the California Consumer Privacy Act (CCPA). The CCPA applies to businesses with a gross annual revenue over $25 million, those buying, selling, or sharing personal information of 100,000 or more California residents, or those deriving 50% or more of their annual revenue from selling California residents' personal information.