(Photo: silvabom/Shutterstock) Businesses should make CPRA and its implications a topic of conversation, not just in legal departments, but also with management and C-suites, whether they are in California, another state, or abroad. (Photo: silvabom/Shutterstock)

Californians have ushered in a law protecting individuals' privacy unlike any other in the United States, and businesses are well-advised to evaluate its impact and prepare to comply.

Proposition 24, which passed on Nov. 3rd, establishes the California Privacy Rights Act (CPRA), which will take effect Jan. 1, 2023. If this seems like déjà vu, it's because just two years ago, the California legislature passed an unprecedented privacy law, the California Consumer Privacy Act (CCPA), which the CPRA amends.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to asset-and-logo-licensing@alm.com. For more information visit Asset & Logo Licensing.

Commercial Lines
Information Security
Commercial Lines
Corporate Risk
Cybersecurity