The CPRA makes several significant changes to the CCPA: It introduces the concept of “sensitive personal data”; It introduces new obligations on businesses, and GDPR-style “principles”; It introduces new rights for consumers; and It creates a new supervisory authority for data protection and privacy in California — the California Privacy Protection Agency.

As the most important outcome of the 2020 election remains in flux, voters in California and Michigan approved new privacy laws Tuesday: California’s Prop 24, which extends provisions of a 2018 privacy law, and Michigan’s Prop 2, which consolidates piecemeal orders into a requirement for police to seek search warrants before seizing electronic data.

The good news for consumers and news publishers alike is that CPRA seeks to close any loopholes in the previous privacy law the state passed two years ago.

The CPRA would provide consumers with an expansive set of new rights beyond those contained in the CCPA, while at the same time fundamentally altering businesses’ privacy compliance obligations under California’s current privacy law in a number of ways.