Just like with the CCPA, the CPRA will take significant measures to comply. Personal information will only be able to be stored and used for the specific and limited purposes permitted under the Acts. It will expand what’s considered personal information and require explicit notices for the delivery of advertising if publishers choose to sell the information or use it to target or deliver digital advertising.
The checklist for compliance with the CCPA will need to be amended to include the enhanced regulations if the CPRA becomes law. Even if it’s passed, there will be guidelines and details that will be included in future rulemaking that aren’t available today.