CCPA vs CPRA: What Changed? CIPP/US California Guide
The CPRA is not a separate law. It amended and expanded the CCPA from 1 January 2023, adding sensitive personal information, the right to correct, limits on sharing for cross-context behavioural advertising and the California Privacy Protection Agency. California refers to the result as the CCPA, as amended.
Practical example
For a California consumer request, first confirm that the business and data are within the CCPA. Then identify the requested right, required notice or opt-out handling.
Common mistake
Treating the CPRA as a separate statute and overlooking the CCPA right or business duty that the amended law now governs.
The California Attorney General explains that the CCPA gives covered consumers rights including access to information, deletion, opt-out of sale or sharing and protection from discrimination for exercising rights. The CPRA added further amendments and protections.
For CIPP/US study, distinguish the consumer right from the business obligation. The facts may require an analysis of scope, sale or sharing, sensitive personal information, notice or the response process.
How this supports CIPP/US study
Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US exam questions.
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.