California, United States
California Privacy Rights Act
The CPRA amended the CCPA, expanded consumer rights around sensitive personal data, and created the California Privacy Protection Agency to enforce the regime.
Unlock unlimited alerts, exports & API access — RuleWatch Pro at $29/mo
Regulation dossier
A focused view of the rule, its enforcement posture, and the timeline teams should keep in their operating plan.
Plain-English summary
California expanded its data-broker regime by moving registration oversight to the California Privacy Protection Agency and by requiring a one-stop deletion mechanism for covered data brokers. It primarily affects data brokers that trade in Californians'' personal information and requires recurring deletion processing, public reporting, and audit-related disclosures.
Reading guide
Use the timeline below to see how the rule progressed from enactment to current obligations.
Related regulations surface adjacent requirements in the same jurisdiction or policy lane.
Timeline
Feb 8, 2023
California SB 362 was introduced to expand data broker registration and deletion obligations.
Oct 10, 2023
The governor signed the Delete Act, moving California data broker oversight to the privacy agency.
Jan 1, 2024
The Delete Act began taking effect for covered California data brokers.
Get email alerts when this regulation changes and export records to CSV for your compliance workflow — available with RuleWatch Pro.
Subscribe for regulation alerts
Free weekly digest for compliance professionals following material legal changes.
Related regulations
Pulled from the same jurisdiction or category so teams can compare adjacent obligations quickly.
California, United States
The CPRA amended the CCPA, expanded consumer rights around sensitive personal data, and created the California Privacy Protection Agency to enforce the regime.
California, United States
California requires covered generative AI providers to give users clear provenance disclosures when AI-generated or AI-altered content is created or presented. It affects providers and some licensees of large generative AI systems and gives the Attorney General and local public lawyers a civil-enforcement path.
California, United States
California requires developers of generative AI systems made available to Californians to publish documentation about the data used to train those systems. It affects developers releasing public-facing generative AI systems or major modifications and is meant to improve transparency around dataset sources and composition.