CCPA and CPRA Compliance Flashcards

Which entity established by the CPRA is responsible for enforcing California privacy law and issuing regulations?

Answer: California Privacy Protection Agency (CPPA)

The CPRA created the California Privacy Protection Agency (CPPA), the first US dedicated state privacy enforcement agency with rulemaking authority.

Under the CCPA, what is the definition of 'sale' of personal information?

Answer: Disclosing personal information for monetary or other valuable consideration

CCPA defines 'sale' broadly to include disclosing personal information for monetary or other valuable consideration, not just cash transactions.

What right did the CPRA add to the CCPA that allows consumers to limit use of their sensitive personal information?

Answer: Right to Limit Use of Sensitive Personal Information

The CPRA introduced the Right to Limit Use and Disclosure of Sensitive Personal Information, allowing consumers to restrict how businesses use their sensitive data.

Which threshold makes a business subject to the CCPA/CPRA based on revenue?

Answer: Annual gross revenues exceeding $25 million

Businesses with annual gross revenues exceeding $25 million that meet other conditions are subject to CCPA/CPRA requirements.

The CPRA strengthened opt-out rights by expanding the concept of 'sale' to also include what?

Answer: Sharing personal information for cross-context behavioral advertising

The CPRA added 'sharing' personal information for cross-context behavioral advertising as a separate opt-out right, covering data shared for targeted advertising without money changing hands.

Under the CCPA, consumers must be given a 'Do Not Sell My Personal Information' link on the business's website. What did the CPRA change this to?

Answer: 'Do Not Sell or Share My Personal Information'

The CPRA amended the required opt-out link to read 'Do Not Sell or Share My Personal Information' to reflect the new opt-out right for sharing.