[et_pb_section fb_built=”1″ custom_padding_last_edited=”on|phone” module_class=”annotated_style” _builder_version=”4.5.7″ _module_preset=”default” width=”100%” max_width=”100%” module_alignment=”center” min_height=”auto” height=”auto” max_height=”none” custom_padding_tablet=”” custom_padding_phone=”1px||10px||false|false” border_width_all=”15px” border_color_all=”#f6c545″ border_style_all=”double” collapsed=”off”][et_pb_row column_structure=”1_5,1_5,1_5,1_5,1_5″ _builder_version=”4.5.7″ _module_preset=”default” custom_margin_tablet=”” custom_margin_phone=”” custom_margin_last_edited=”on|phone” custom_padding=”20px||6px||false|false” animation_style=”fade” animation_duration=”500ms” collapsed=”on”][et_pb_column type=”1_5″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_button button_url=”https:\/\/www.caprivacy.org\/cpra-resource-center\/” button_text=”HOME” _builder_version=”4.5.7″ _module_preset=”default” button_text_size=”11px” button_bg_color=”#2a4a6c” button_border_width=”1px” button_border_color=”#2a4a6c” button_border_radius=”8px” button_font=”|||on|||||” background_layout=”dark” custom_margin=”|0px||0px|false|true” custom_css_main_element=”width:99%!important;||background-image: url(‘https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/Avatar-2.png’);||background-size: 31px;||background-repeat: no-repeat;||background-position: left center;||background-position-x: 14px;” locked=”off” custom_css_main_element_last_edited=”on|phone” custom_css_main_element_phone=”width:90%!important;”][\/et_pb_button][\/et_pb_column][et_pb_column type=”1_5″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_button button_url=”https:\/\/www.caprivacy.org\/cpra-exec-summary\/” button_text=”EXEC SUMMARY” _builder_version=”4.5.7″ _module_preset=”default” button_text_size=”11px” button_text_color=”#FFFFFF” button_bg_color=”#2a4a6c” button_border_width=”1px” button_border_color=”#2a4a6c” button_border_radius=”8px” button_font=”|||on|||||” background_layout=”dark” custom_margin=”|0px||0px|false|true” custom_css_main_element=”width:99%!important;||background-image: url(‘https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/Avatar-2.png’);||background-size: 31px;||background-repeat: no-repeat;||background-position: left center;||background-position-x: 14px;” locked=”off” custom_css_main_element_last_edited=”on|phone” custom_css_main_element_phone=”width:90%!important;”][\/et_pb_button][\/et_pb_column][et_pb_column type=”1_5″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_button button_url=”https:\/\/www.caprivacy.org\/cpra-summary-by-section\/” button_text=”SUMMARY BY SECTION” _builder_version=”4.5.7″ _module_preset=”default” button_text_size=”11px” button_bg_color=”#2a4a6c” button_border_width=”1px” button_border_color=”#2a4a6c” button_border_radius=”8px” button_font=”|||on|||||” custom_margin=”|0px||0px|false|true” custom_css_main_element=”width:99%!important;||background-image: url(‘https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/Avatar-2.png’);||background-size: 31px;||background-repeat: no-repeat;||background-position: left center;||background-position-x: 14px;” locked=”off” custom_css_main_element_last_edited=”on|phone” custom_css_main_element_phone=”width:90%!important;”][\/et_pb_button][\/et_pb_column][et_pb_column type=”1_5″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_button button_url=”https:\/\/www.caprivacy.org\/annotated-cpra-text-with-ccpa-changes\/” button_text=”TEXT OF CPRA” _builder_version=”4.5.7″ _module_preset=”default” button_text_size=”11px” button_border_width=”1px” button_border_color=”#2a4a6c” button_border_radius=”8px” button_font=”|||on|||||” background_layout=”dark” custom_margin=”|0px||0px|false|true” custom_css_main_element=”width:99%!important;||background-image: url(‘https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/preview-full-Avatar-3.png’);||background-size: 31px;||background-repeat: no-repeat;||background-position: left center;||background-position-x: 14px;” locked=”off” custom_css_main_element_last_edited=”on|phone” custom_css_main_element_phone=”width:90%!important;”][\/et_pb_button][\/et_pb_column][et_pb_column type=”1_5″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_button button_url=”https:\/\/www.caprivacy.org\/cpra-timeline\/” button_text=”TIMELINE” _builder_version=”4.5.7″ _module_preset=”default” button_text_size=”11px” button_bg_color=”#2a4a6c” button_border_width=”1px” button_border_color=”#2a4a6c” button_border_radius=”8px” button_font=”|||on|||||” background_layout=”dark” custom_margin=”|0px||0px|false|true” custom_css_main_element=”width:99%!important;||background-image: url(‘https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/Avatar-2.png’);||background-size: 31px;||background-repeat: no-repeat;||background-position: left center;||background-position-x: 14px;” locked=”off” custom_css_main_element_last_edited=”on|phone” custom_css_main_element_phone=”width:90%!important;”][\/et_pb_button][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”on|desktop” _builder_version=”4.5.7″ _module_preset=”default” max_width=”1024px” module_alignment=”center” custom_padding=”||||false|false” custom_padding_tablet=”” custom_padding_phone=”||0px||false|false” animation_style=”fade” animation_duration=”300ms” collapsed=”off”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_image src=”https:\/\/www.caprivacy.org\/wp-content\/uploads\/2021\/02\/preview-full-Snipped-Version-of-Banner.jpg” align=”center” admin_label=”Image” _builder_version=”4.5.7″ _module_preset=”default” width=”100%” max_width=”100%” module_alignment=”center” custom_margin=”||0px||false|false” custom_padding=”||20px||false|false” custom_css_main_element=”text-align:center;||width:100%”][\/et_pb_image][et_pb_text admin_label=”Text” _builder_version=”4.5.7″ _module_preset=”default” header_font=”|700|||||||” header_text_align=”center” header_text_color=”#2a4a6c” header_font_size=”41px” text_orientation=”center” custom_margin=”||15px||false|false” header_font_size_tablet=”35px” header_font_size_phone=”30px” header_font_size_last_edited=”on|desktop”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_text_color=”#2a4a6c” header_text_color=”#1c4c73″ custom_margin=”||||false|false” custom_css_main_element=”text-align:center;||color:#1c4c73;||font-size:32px;||font-weight:normal;”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font_size=”16px”]Below is the text of the California Privacy Rights Act (CPRA) of 2020. The text below does NOT include the changes from the text of the California Consumer Privacy Act (CCPA) that was in the text of Proposition 24 that was approved by voters. This Resource Center includes other versions of the text of the CPRA:<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row module_id=”national-and-state-leaders” _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_text_color=”#1c4c73″ text_font_size=”16px” header_2_text_color=”#2a4a6c” header_2_font_size=”32px” custom_css_main_element=”font-weight:normal”]<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row module_id=”section0.5″ module_class=”content_table_list” _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_text_color=”#1c4c73″ header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”35px”]<\/p>\n
[\/et_pb_text][et_pb_text module_class=”annotatedList” _builder_version=”4.5.7″ _module_preset=”default” text_text_color=”#1c4c73″ text_font_size=”16px”]<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=”Section1″ _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text module_id=”section1″ _builder_version=”4.5.7″ _module_preset=”default” text_font=”|700|||||||” text_text_color=”#1c4c73″ header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”22px” header_2_font=”|700|||||||” header_2_text_align=”left” header_2_text_color=”#2a4a6c” header_2_font_size=”22px”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_text_color=”#1c4c73″ text_font_size=”16px”]<\/p>\n
This measure shall be known, and may be cited, as the \u201cCalifornia Privacy Rights Act of 2020.\u201d<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=”Section2″ module_id=”section2″ _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font=”|700|||||||” header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”22px” header_2_font=”|700|||||||” header_2_text_align=”left” header_2_text_color=”#2a4a6c” header_2_font_size=”22px”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font_size=”16px”]<\/p>\n
The people of the State of California hereby find and declare all of the following:<\/p>\n
(A)<\/strong><\/a> In 1972, California voters amended the California Constitution<\/a> to include the right of privacy among the \u201cinalienable\u201d rights of all people. Voters acted in response to the accelerating encroachment on personal freedom and security caused by increased data collection<\/a> and usage in contemporary society. The amendment established a legal and enforceable constitutional right of privacy<\/a> for every Californian. Fundamental to this right of privacy is the ability of individuals to control<\/a> the use, including the sale<\/a>, of their personal information<\/a>.<\/p>\n (B)<\/strong><\/a> Since California voters approved the constitutional right of privacy<\/a>, the California Legislature has adopted specific mechanisms to safeguard Californians\u2019 privacy, including the Online Privacy Protection Act<\/a>, the Privacy Rights for California Minors in the Digital World Act<\/a>, and Shine the Light<\/a>, but consumers<\/a> had no right to learn what personal information<\/a> a business<\/a> had collected<\/a> about them and how they used it or to direct businesses<\/a> not to sell<\/a> the consumer\u2019s<\/a> personal information<\/a>.<\/p>\n (C)<\/strong><\/a> That changed in 2018, when more than 629,000 California voters signed petitions to qualify<\/a> the California Consumer Privacy Act<\/a> of 2018 for the ballot. In response to the measure\u2019s qualification, the Legislature enacted the California Consumer Privacy Act<\/a> of 2018 (CCPA<\/a>) into law. The CCPA<\/a> gives California consumers<\/a> the right to learn what information a business<\/a> has collected<\/a> about them, to delete their personal information<\/a>, to stop businesses<\/a> from selling<\/a> their personal information<\/a>, including using it to target them with ads that follow them as they browse the internet from one website to another, and to hold businesses<\/a> accountable if they do not take reasonable steps to safeguard their personal information<\/a>.<\/p>\n (D)<\/strong><\/a> Even before the CCPA<\/a> had gone into effect, the Legislature considered many bills in 2019 to amend the law<\/a>, some of which would have significantly weakened it. Unless California voters take action, the hard-fought rights consumer<\/a>s have won could be undermined by future legislation.<\/p>\n (E)<\/strong><\/a> Rather than diluting privacy rights, California should strengthen them over time. Many business<\/a>es collect<\/a> and use consumer<\/a>s\u2019 personal information<\/a>, sometimes without consumer<\/a>s\u2019 knowledge regarding the business<\/a>\u2019s use and retention of their personal information<\/a>. In practice, consumer<\/a>s are often entering into a form of contractual arrangement in which, while they do not pay money for a good or service<\/a>, they exchange access to that good or service<\/a> in return for access to their attention or access to their personal information<\/a>. Because the value of the personal information<\/a> they are exchanging for the good or service<\/a> is often opaque, depending on the practices of the business<\/a>, consumer<\/a>s often have no good way to value the transaction. In addition, the terms of agreement or policies in which the arrangements are spelled out, are often complex and unclear, and as a result, most consumer<\/a>s never have the time to read or understand them.<\/p>\n (F)<\/strong><\/a> This asymmetry of information makes it difficult for consumer<\/a>s to understand what they are exchanging and therefore to negotiate effectively with business<\/a>es. Unlike in other areas of the economy where consumer<\/a>s can comparison shop, or can understand at a glance if a good or service<\/a> is expensive or affordable, it is hard for the consumer<\/a> to know how much the consumer<\/a>s information is worth to any given business<\/a>, when data use practices vary so widely between business<\/a>es.<\/p>\n (G)<\/strong><\/a> The State therefore has an interest in mandating laws that will allow consumer<\/a>s to understand more fully how their information is being used, and for what purposes. In the same way that ingredient labels on foods help consumer<\/a>s shop more effectively, disclosure around data management practices will help consumer<\/a>s become more informed counterparties in the data economy, and promote competition. Additionally, if a consumer<\/a> can tell a business<\/a> not to sell<\/a> the consumer<\/a>‘s data, then that consumer<\/a> will not have to scour a privacy policy to see whether the business<\/a> is, in fact, selling<\/a> that data, and the resulting savings in time is worth, in the aggregate, a tremendous amount of money.<\/p>\n (H)<\/strong><\/a> Consumer<\/a>s need stronger laws to place them on a more equal footing when negotiating with business<\/a>es in order to protect their rights. Consumer<\/a>s should be entitled to a clear explanation of the uses of their personal information<\/a>, including how it is used for advertising, and to control<\/a>, correct, or delete it, including by allowing consumer<\/a>s to limit business<\/a>es\u2019 use of their sensitive personal information to help guard against identity theft, to opt-out of the sale<\/a> and sharing<\/a> of their personal information<\/a>, and to request that business<\/a>es correct inaccurate information about them.<\/p>\n (I)<\/strong><\/a> California is the world leader in many new technologies that have reshaped our society. The world today is unimaginable without the internet, one of the most momentous inventions in human history, and the new services<\/a> and business<\/a>es that arose on top of it, many of which were invented here in California. One of the most successful business<\/a> models for the internet has been services<\/a> that rely on advertising to make money as opposed to charging consumer<\/a>s a fee. Advertising-supported services<\/a> have existed for generations and can be a great model for consumer<\/a>s and business<\/a>es alike. However, some advertising business<\/a>es today use technologies and tools that are opaque to consumer<\/a>s to collect<\/a> and trade vast amounts of personal information<\/a>, to track them across the internet, and to create detailed profiles of their individual interests. Some companies that do not charge consumer<\/a>s a fee, subsidize these services<\/a> by monetizing consumer<\/a>s\u2019 personal information<\/a>. Consumer<\/a>s should have the information and tools necessary to limit the use of their information to noninvasive proprivacy advertising, where their personal information<\/a> is not sold<\/a> to or shared<\/a> with hundreds of business<\/a>es they\u2019ve never heard of, if they choose to do so. Absent these tools, it will be virtually impossible for consumer<\/a>s to fully understand these contracts they are essentially entering into when they interact with various business<\/a>es.<\/p>\n (J)<\/strong><\/a> Children are particularly vulnerable from a negotiating perspective with respect to their privacy rights. Parents should be able to control<\/a> what information is collected<\/a> and sold<\/a> or shared<\/a> about their young children and should be given the right to demand that companies erase information collected<\/a> about their children.<\/p>\n (K)<\/strong><\/a> Business<\/a> should also be held directly accountable to consumer<\/a>s for data security breaches and notify consumer<\/a>s when their most sensitive information has been compromised.<\/p>\n (L)<\/strong><\/a> An independent watchdog whose mission is to protect consumer<\/a> privacy should ensure that business<\/a>es and consumer<\/a>s are well-informed about their rights and obligations and should vigorously enforce the law against business<\/a>es that violate consumer<\/a>s\u2019 privacy rights.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=”Section3″ module_id=”section3″ _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font=”|700|||||||” header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”22px” header_2_font=”|700|||||||” header_2_text_align=”left” header_2_text_color=”#2a4a6c” header_2_font_size=”22px”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font_size=”16px”]<\/p>\n In enacting this Act, it is the purpose and intent of the people of the State of California to further protect consumer<\/a>s\u2019 rights, including the constitutional right of privacy<\/a>. The implementation of this Act shall be guided by the following principles:<\/p>\n (A)<\/strong><\/a> Consumer<\/a> Rights<\/strong><\/p>\n (B)<\/strong><\/a> Responsibilities of Business<\/a>es<\/strong><\/p>\n (C)<\/strong><\/a> Implementation of the Law<\/strong><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=”Section4″ module_id=”section4″ _builder_version=”4.5.7″ _module_preset=”default” width=”80%” module_alignment=”center” custom_padding=”||0px||false|false” collapsed=”on”][et_pb_column type=”4_4″ _builder_version=”4.5.7″ _module_preset=”default”][et_pb_text admin_label=”Text” _builder_version=”4.5.7″ _module_preset=”default” text_font=”|700|||||||” header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”22px” header_2_font=”|700|||||||” header_2_text_align=”left” header_2_text_color=”#2a4a6c” header_2_font_size=”22px”]<\/p>\n [\/et_pb_text][et_pb_text module_id=”1798.100″ _builder_version=”4.5.7″ _module_preset=”default” text_font=”|700|||||||” header_font=”|700|||on|||#f6c847|” header_text_align=”left” header_text_color=”#1c4c73″ header_font_size=”22px” header_2_font=”|700|||||||” header_2_text_align=”left” header_2_text_color=”#2a4a6c” header_2_font_size=”22px”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.5.7″ _module_preset=”default” text_font_size=”16px”]<\/p>\nSEC. 3. Purpose and Intent.<\/a><\/h3>\n
\n
\n
\n
SEC. 4. Section 1798.100 of the Civil Code is amended to read:<\/a><\/h3>\n
1798.100. General Duties of Businesses that Collect Personal Information<\/a><\/h3>\n