The California Privacy Rights Act (CPRA) significantly expands and strengthens the California Consumer Privacy Act (CCPA). The amended CCPA gives Californians new rights and creates additional obligations forcing businesses to carefully review their online advertising practices.
As of Jan. 1, 2023 businesses must give Californians a clear opt-out option when asking to “share” their data with adtech companies and related analytics providers, with few legal exceptions.
This report covers:
- The relationship between data “sales” and “sharing”
- California’s policy expectations for opt-out preference signals like GPC
- How this affects European-style cookie compliance approaches