Businesses that are subject to the California Privacy Rights Act (CPRA) will need to reconsider their privacy practices, effective January 1, 2023. The CPRA applies, even if the company does not have offices in the state, if they meet one of two thresholds and do business in California. Businesses can prepare by drafting new or updating existing personnel privacy policies.
