California Privacy Protection Agency Sets Aug. 23 as Deadline on Data Rules

On Friday (July 8) the California Privacy Protection Agency (CPPA) began the process to implement the Consumer Privacy Rights Act of 2020 (CPRA), which updates and enhances the California Consumer Privacy Act (CCPA).

New regulations would put consumers “in a position where they can deliberately and freely bargain with a business over the business’s use of personal information,” according to the agency’s initial statement of reasons.

The public comment period for the proposed regulations ends on Aug. 23.

The proposed regulations set out three goals, according to the state website: update the CCPA to conform with changes made by the CPRA; provide guidance to consumers and businesses on the new privacy rules; reorganize and consolidate to make the regulations easier to understand.

See also: California Privacy Bill Draft Sidesteps Key Personal Data Collection Issues

The proposals specify how businesses should address customer privacy requests and how to get customer consent for use of data. The CPRA amendments prohibit businesses from collecting, using or disclosing personal information without the customer’s permission.

In addition, the proposals detail the requirements to allow consumers to opt out of the sale or sharing of their personal information with any business. The regulations encourage innovation in consumer-friendly and privacy-aware products and services.

Read more: US Online Privacy Bill Gets Bipartisan Support 

PYMNTS wrote that U.S. House and Senate leaders from both parties are crafting online privacy bills that would limit the data businesses could collect. The House and Senate bills have differences, however, particularly over legal liability and how consumers can address privacy violations.

For all PYMNTS TechREG coverage, subscribe to the daily TechREG Newsletter.