On May 4, 2020 Alastair Mactaggart and the Californians for Consumer Privacy made a post on Twitter that caught many in the Privacy space by surprise – they had secured enough signatures to qualify the California Privacy Rights Act (CPRA or CCPA 2.0) for the November 2020 ballot. Many thought the group would likely struggle to get the 675,000 signatures required to make the ballot given the current global health crisis, however, Mactaggart said they had collected 900,000 signatures in total.

According to its creators, the goal of the CPRA is to address certain limitations within the CCPA that the backers found could be improved. The CPRA would create several amendments to the CCPA as we know it currently, including adding new consumer rights and updating definitions. It would also change the threshold to qualify as a business; the requirement for consumer data bought, sold, collected, or shared would be increased from 50,000 to 100,000. Additionally, the CPRA includes a proposal for a new California regulatory body that would be responsible for enforcing privacy regulations in the state. It would also extend the current exceptions for business to business information and employee information to January 1, 2023.

The next step to get the CPRA on the November 2020 ballot is for officials to count and ensure that there are at least 675,000 valid signatures from registered California voters. This needs to be completed by June 25, 2020 to appear on the ballot. If the CPRA is passed, which early polling suggests is very likely, it would take effect on January 1, 2023.

For more information on the CPRA, download the webinar California Privacy Rights Act (CCPA 2.0): Everything You Need to Know.

To read the full text of the CPRA, click here.

OneTrust is the industry leader in privacy management software. To learn how we can help your business comply with the CCPA, visit Onetrust.com/CCPA-Compliance.