While there is still no U.S. national federal data privacy law, a level playing field so to speak, that has not stopped states from taking the lead instead. Less than a year after the California Consumer Privacy Act (CCPA) enforcement began, California passed yet another sweeping privacy law: the California Privacy Rights Act (CPRA), with a 56% majority in the California General Election. The CPRA imposes firmer protection of consumer privacy rights, similar to the European Union's General Data Protection Regulation (GDPR). This new act will have a significant impact on corporations working in California or for any organization processing the data of Californians.