What is New in California Privacy and What Does it Mean for the Company?
summary
CPRA amends CCPA and creates a new enforcement agency, with major changes effective Jan 1, 2023 (some provisions effective Dec 16, 2020); compliance is triggered by $25M annual revenue or >50k records (rising to 100k in 2023) or 50% revenue from selling. “Selling” spans most data exchanges; “sharing” targets cross‑context behavioral ads and prompts a required do not sell or share opt‑out. Expect $7,500 per intentional violation, $100–$750 per consumer for security breaches, and practical work on data mapping, vendor contracts, privacy notices, audits and documented reasonable security controls.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 0:36Disclaimer
- 1:20California Privacy Rights Act
- 6:41High Level Messages
- 6:58Who and What Data is Protected
- 8:43What Data is Protected
- 9:40What is Personal Information
- 10:52Who has to comply
- 11:02The definition of a business
- 13:43The definition of a parent company
- 18:42What you need to do
- 21:00Other requirements
- 27:38Audit reports
- 30:28Time bomb
- 31:22Security Breaches
- 32:17Litigation Update
- 32:29Short Term Goals
- 33:53Intermediate Term Goals
- 36:03Action Items
- 37:01LongTerm Goals
- 37:44Data Hoarding
- 39:08More Questions
related talks
46mHow to Design and Execute Superior Employee Privacy Practices
55mBattle for online privacy
01h 07mStrategic Goals and Mechanisms of the GDPR and CCPA
47mState of CalPrivacy: Clarifying Regulation & Enforcement in 2026
52mData Protection and Privacy Development Around the World
22mCCPA: State privacy law effects on cloud development
25mWhen GDPR and CCPA strike
19mData Protection for Developers: Past, Present, and Future