Unlock unlimited alerts, exports & API access — RuleWatch Pro at $29/mo
Regulation dossier
A focused view of the rule, its enforcement posture, and the timeline teams should keep in their operating plan.
Plain-English summary
The CPRA amended the CCPA, expanded consumer rights around sensitive personal data, and created the California Privacy Protection Agency to enforce the regime.
Reading guide
Use the timeline below to see how the rule progressed from enactment to current obligations.
Related regulations surface adjacent requirements in the same jurisdiction or policy lane.
Timeline
Nov 3, 2020
California voters approved Proposition 24, creating the CPRA amendments to the CCPA.
Jan 1, 2023
Most CPRA operational requirements took effect for covered businesses.
Jul 1, 2023
The California Privacy Protection Agency began enforcing CPRA requirements after the initial implementation period.
Get email alerts when this regulation changes and export records to CSV for your compliance workflow — available with RuleWatch Pro.
Subscribe for regulation alerts
Free weekly digest for compliance professionals following material legal changes.
Related regulations
Pulled from the same jurisdiction or category so teams can compare adjacent obligations quickly.
California, United States
California expanded its data-broker regime by moving registration oversight to the California Privacy Protection Agency and by requiring a one-stop deletion mechanism for covered data brokers. It primarily affects data brokers that trade in Californians'' personal information and requires recurring deletion processing, public reporting, and audit-related disclosures.
California, United States
California requires covered generative AI providers to give users clear provenance disclosures when AI-generated or AI-altered content is created or presented. It affects providers and some licensees of large generative AI systems and gives the Attorney General and local public lawyers a civil-enforcement path.
California, United States
California requires developers of generative AI systems made available to Californians to publish documentation about the data used to train those systems. It affects developers releasing public-facing generative AI systems or major modifications and is meant to improve transparency around dataset sources and composition.