The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) radically changed privacy and data protection in the United States by providing consumers with expansive privacy rights and more control over the personal information that businesses collect about them, added new responsibilities for business and service providers, and created a new state agency, the California Privacy Protection Agency to handle enforcement. Every company with a California nexus will need to evaluate and implement changes across business lines to comply with the CCPA and CPRA.

We can also help you closely monitor similar laws and regulations enacted in other states (and countries), including the Virginia’s Consumer Data Protection Act (CDPA) and the General Data Protection Regulation (GDPR), ensuring that the privacy compliance program developed addresses any potential impact of the changing legal and regulatory landscape.