Concord Privacy News: 11/30/2022

CPRA takes effect January 1; Organizations continue to risk non-compliance.

California Privacy Rights Act (CPRA) Takes Effect January 1 - Is Your Organization Prepared?

Under CPRA, exemptions previously available under the California Consumer Privacy Act (CCPA) will no longer apply

The California Consumer Privacy Act (CCPA), enacted by the California legislature in 2018, and the California Privacy Rights Act (CPRA), approved by California voters in 2020, represent the most comprehensive consumer privacy legislation in the U.S. The CPRA significantly amends and expands the CCPA, and it is sometimes referred to as “CCPA 2.0.”

Of note is that the CPRA fully takes effect on January 1, 2023. This means that the exemptions that were previously available under CCPA for employee information and information collected in a B2B context will expire on that date. As of January 1, California-resident employees and applicants will have the same data privacy rights as other consumers, and B2B transactions will be subject to the CPRA.

The good news is that compliance with CCPA and CCPR does not have to be complicated. Concord simplifies data privacy with one platform for compliance and privacy-first data collection that drives better data, user loyalty, and security & protection. Sign up for a free account today.

Other Privacy News of Note

Meta Hit With ~$275M GDPR Penalty for Facebook Data-Scraping Breach

Facebook’s parent, Meta, has been hit with another hefty penalty for breaching European data protection law. The €265 million (~$275M) fine was announced by the Irish Data Protection Commission (DPC), the tech giant’s lead regulator for the European Union’s General Data Protection Regulation (GDPR). Read More

The Current State of Data Privacy is Complicated

The sheer amount of data being created and collected in today’s digital world is exponentially growing and not showing any signs of slowing down. However, attitudes and regulations towards data privacy and protection are undergoing a seismic shift -- both from consumers and business alike. More consumers and businesses have been forced to think about data privacy. We’re in the midst of an ever-changing privacy landscape. Read More

Google Fell Short on Privacy Promises, Employees Say

Google repeatedly positions itself as a staunch supporter of privacy in the public sphere, but that posturing does not always apply behind closed doors. Google employees sometimes acknowledge that the company’s data-mining practices are both invasive and opaque—so opaque that even they “don’t understand and can’t describe” exactly how users are being tracked, according to internal interview excerpts found in a series of newly unsealed court records. Read More

‍