Stuart L. Pardau (email@example.com) is Associate Professor of Business Law, Professional Practice, in the Miami Herbert Business School at the University of Miami.
In November 2020, California voters, pursuant to the ballot initiative process mandated by that state’s constitution, passed another major piece of privacy legislation, the California Privacy Rights Act (CPRA), significantly expanding and updating existing privacy law under the California Consumer Privacy Act (CCPA). The new law goes into effect on January 1, 2023. In addition to the statutory provisions in CPRA, the CCPA is expected to issue supplementary regulations by July 1, 2022.
While the CCPA was the most significant development in US privacy law in years, the CPRA is arguably even more significant. Among other things, the CPRA creates a new state privacy agency, the California Privacy Protection Agency, tasked with enforcing the CPRA. The California Privacy Protection Agency is allotted an annual budget of $10 million with express authorization in the statute for the legislature to increase this budget.