Index
Consumer ProtectionCalifornia, USA

California Privacy Rights Act (CPRA)

Summary

Passed by voters as Prop 24, the CPRA massively expands the CCPA, creating a dedicated state privacy agency and giving consumers the right to correct their data and restrict how 'sensitive' data is used.

Rights & Rules

  • 01.
    You have the 'Right to Correct': You can force a company to fix inaccurate personal information they have about you.
  • 02.
    You have the 'Right to Limit': You can order a company to stop using your 'Sensitive Personal Information' (like your SSN, exact GPS location, or private text messages) for anything other than providing the basic service you requested.
  • 03.
    Companies must prominently display a 'Limit the Use of My Sensitive Personal Information' link alongside the 'Do Not Sell' link on their websites.
  • 04.
    Companies are legally required to practice 'data minimization,' meaning they cannot hold onto your data longer than is reasonably necessary.

Penalties

  • 01.
    The newly created California Privacy Protection Agency (CPPA) can fine companies $2,500 per violation, or $7,500 for violations involving the data of minors under 16.

Verified Citations

California Civil Code Section 1798.121

Source
"A consumer shall have the right, at any time, to direct a business that collects sensitive personal information about the consumer to limit its use of the consumer's sensitive personal information to that use which is necessary to perform the services..."