Archer provides three Authoritative Sources for California state privacy laws.
The California Consumer Privacy Act (CCPA) was passed in 2018 and went into effect on January 1, 2020. This bill grants consumers the right to request businesses disclose the categories and specific pieces of personal information that it collects about a consumer and details about the categories of sources where that information is collected, the purposes for collecting/selling the information and the third parties with which the information is shared. We previously had the June 2018 version of the Law and this has since been created as a new Authoritative Source for the September 2018 (final) version of the Law.
The California Consumer Privacy Act (CCPA), enacted in 2018, creates new consumer rights relating to the access to, deletion of, and sharing of personal information that is collected by businesses. It also requires the Attorney General to solicit broad public participation and adopt regulations to further the CCPA’s purposes. The regulations (finalized in August of 2020) establish procedures to facilitate consumers’ new rights under the CCPA and provide guidance to businesses for how to comply.
The California Privacy Rights Act (CPRA), a ballot initiative approved by California voters in the 2020 general election, expands the state’s consumer privacy law and creates an omnibus privacy regulation in the state. The CPRA creates additional consumer rights, modifies existing CCPA rights, mandates a new category of consumer personal information with associated rules, and establishes a new privacy enforcement agency. This new regulation does not go into effect until January 2023 in order to give businesses time to prepare for it. The takes effect on January 1, 2023 and becomes fully enforceable on July 1, 2023 – with a lookback period from January 1, 2022. The purpose and intent of this act in the State of California is to further protect consumers' rights, including the constitutional right of privacy.
This content is available in English only.
Mappings for California State Privacy Laws authoritative sources to the Archer Control Standard Library are available in the authoritative source content packs.
The source of this content comes from the California Legislative Information site.
The California State Privacy Laws authoritative source content is available with the use of the Archer Policy Program Management, Archer IT Policy Program Management, and/or Archer Authorization and Assessment use cases. No additional license is required.
To learn more about California State Privacy Laws:
To learn more about this content, please contact your Account Rep for additional details. For technical support questions, please open a support case or contact Archer at archersupport@rsa.com for more information.