The San Francisco Bay Area and Silicon Valley KnowledgeNet chapters of the International Association of Privacy Professionals ("IAPP") hosted a virtual panel to discuss the newly-passed California Privacy Rights Act ("CPRA"). Panelists included:

• Alastair Mactaggart, Chair of Californians for Consumer Privacy;
• Chris Hoofnagle, Professor and Faculty Director at University of California Berkeley Center for Law and Technology ("BCLT");
• Lothar Determann, Partner at Baker & McKenzie and author of California Privacy Law.

Determann moderated the discussion and recalled how he, Mactaggart, and Hoofnagle debated the pros and cons of Proposition 24 at the annual BCLT Privacy Law Forum on October 9, 2020. The goal of the IAPP KnowledgeNet was not to rehash the debate; the people have spoken—Proposition 24 has passed. Rather, Determann described the goal of the panel as:

• Helping privacy professionals to familiarize themselves with the new law;
• Discussing how to prepare for compliance; and
• Benefiting from the perspective of Mactaggart and Hoofnagle, who hold the key to authoritative, first-hand knowledge of the legislative history of the CPRA.

What Is the CPRA?

The new California consumer privacy ballot initiative, Proposition 24 has garnered 56.1% of the vote and was officially certified on December 16, 2020. For the most part, it will not become effective until Jan. 1, 2023. However, a couple of provisions, specifically those applicable to employers, will have an immediate effect.

At the IAPP KnowledgeNet event, Determann asked Mactaggart how we should refer to the new law, which is officially entitled "California Privacy Rights Act" and modifies the "California Consumer Privacy Act ("CCPA")," passed in 2018. Mactaggart suggested "CPRA." One attendee noted in the chat function of the virtual panel that at least two other California laws already go by CPRA, including the California Public Records Act and California Political Reform Act.