ANALYSIS: California Privacy Reboot Puts Rights in Spotlight

The start of the new year marked the first anniversary of the effective date of the California Consumer Privacy Act (CCPA), yet businesses are already making preparations for the voter-approved update: the California Privacy Rights Act (CPRA). The rapid evolution of California’s law from one about “Consumer Privacy” to one addressing “Privacy Rights” underscores the influence of the European Union model, which recognizes privacy as a fundamental right that goes beyond commercial transactions.

While the CPRA itself does not expand privacy rights outside the commercial context—indeed, it extends the CCPA’s exemptions for employee-related information and certain business-to-business communications—it should not ...