.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
Multi-Hyphenate Privacy Professionals: 3 Strategies for Success
When we write about data privacy, it’s easy to default to talking to...
Read Now
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
Key Resources for Compliance
You wouldn’t navigate the jungle without the right equipment; you shouldn’t navigate California’s privacy landscape without the right equipment, either.
Don’t worry, you don’t need a machete, tent, or mosquito netting—when it comes to data privacy compliance, knowledge is the best gear to equip yourself with.
Find it here, in your CPRA Survival Kit. We’ve gathered all of our most informative resources on the CPRA here, so you can quickly find the most relevant answers to your questions.
What is the CPRA?
CPRA Overview
Are you subject to the California Privacy Rights Act (CPRA)? What are its primary requirements What penalties could you incur? Learn the answer to these questions and more in this blog article:
A Deeper Dive
For those looking for a deeper dive into the CPRA questions, we field the most, download our free and ungated FAQ eBook:
Why Is it Important?
Fines That Add Up
Privacy-minded individuals understand that respecting consumers' rights is inherently worthwhile, but data privacy compliance also saves businesses money and reduces risk.
Businesses that violate the CPRA are subject to:
- $2,000 per offense for mistake
- $2,500 per offense for negligent mistakes
- $7,500 per offense for willful offenses
This adds up! Each affected individual counts as one offense, so if a data breach exposes thousands of customers’ data, the penalty could be in the millions of dollars.
The Sephora Example
Take beauty retailer Sephora—the California Attorney General gave them 30 days to fix CCPA violations on their website, but they didn’t make the deadline in time. As a result, they were hit with a $1.2 million fine in what became the first official enforcement action of the CCPA.
We dive deep into what went wrong and how the penalty came about in our blog:
Read it to learn more about the penalties that noncompliance invites and how best to minimize your own risk.
What Do I Need to Do?
Start With the Basics
For businesses subject to any of the five laws coming online in 2023, we recommend following along on this checklist:
It covers the basics that you need for compliance with any privacy law, including the CPRA.
DSAR Overview
Learn or remind yourself of the basics of data subject access requests:
Have a DSAR Process That Includes Your Employees
One of the most unique features of the CPRA that businesses must be aware of is how the law treats data subject access requests (DSARs). Unlike other state privacy laws, the CPRA allows employees to make DSARs. Learn more about how this elevates complexity and risk in our infographic:
Consent Requirements Under CPRA
And, as with all omnibus data privacy legislation, businesses need to be aware of how the law treats consent for data collection, processing, and transfers. Under the CPRA, businesses need to offer a means for consumers to:
- Opt out of the sale or sharing of their personal information
- Request businesses to limit the use of their sensitive personal information to only what is necessary for the business to provide its core product or service
To dig deeper into the consent requirements under the CPRA, review our blog:
How Do I Get Compliant?
Find a CMP That Works for You
Consent Management Platforms (CMPs) are a professional’s best friend when it comes to CPRA compliance. They help you:
-
Collect
-
Record
-
And act on user consent
Many CMPs provide additional functionality to support compliance, like managing and executing DSARs.
Knowing that a CMP is an essential component to CPRA compliance is one thing; knowing which is the right CMP for your organization is another matter entirely. When evaluating CMPs, use our scorecard template, a downloadable spreadsheet that identifies essential categories to evaluate and questions to ask when comparing different CMPs.
Check Out What Osano Can Do for You
As a CMP vendor, Osano is well aware of the individual challenges posed by the CPRA and the ways in which we can help businesses overcome them. Find out how we can support your business in our guide:
And of course, if you’d rather skip the reading and talk to somebody in person about how we can help your business, just schedule a demo.