CPRA

Get ready for the California Privacy Rights Act (CPRA)

Learn about the main impact of the law on your business and digital activities, and how Didomi can help ensure compliance.

What to expect?

July 2023: California Privacy Rights Act (CPRA) enforcement begins.

Consumers will now have the right to:

Opt-out of selling or sharing personal information, including third-party ad cookies
Access, correct and delete their personal data, with third-party notifications
Be informed of personal data retention periods and/or criteria
Opt-in is needed for Sensitive Personal Information (including geolocation)

Businesses have new obligations:

Display a notice to inform the user of personal information collection
Provide users with a way to exercise their rights (accepting and processing Data Subject Requests)
Keep data collected to a minimum, and limit purposes for collection
Carry out risk assessments and fulfill cybersecurity requirements

Risks are both financial and reputational:

Fines up to $7,500 per intentional violation / per impacted user = potentially millions
Fines up to $2,500 per non intentional violation
Reputation, loss of transparency and trust (40% of consumers would switch brands after a negative privacy experience SOURCE)
With CPRA, there is no longer a 30 day grace period to correct violations after notification

ANY DEVICE, ANY ENVIRONMENT

Consent management

Ensure the right to opt-out and collect user consent in all countries and devices.

Create privacy notices that reflect your brand while easily managing data providers and purposes.

Generate proof of consent in case of audit or complaint.

Measure and optimize your consent rate with advanced Analytics.

Detect, apply and respect Global Privacy Control (GPC).