The IAPP — International Association of Privacy Professionals — offers its take on the top 10 impactful provisions of the California Privacy Rights Act ballot initiative.

  • Sensitive information obligations
  • New enforcement authority
  • Expanded data breach definition
  • Audits and risk assessment for high risk processing
  • Restrictions on automated processing and profiling
  • Right to rectification
  • Opt-in and heightened penalties regarding children’s information
  • Data retention limitation
  • Extended employee right moratorium
  • Service provider/third party extended obligations

Details from the IAPP.