The IAPP — International Association of Privacy Professionals — offers its take on the top 10 impactful provisions of the California Privacy Rights Act ballot initiative.
- Sensitive information obligations
- New enforcement authority
- Expanded data breach definition
- Audits and risk assessment for high risk processing
- Restrictions on automated processing and profiling
- Right to rectification
- Opt-in and heightened penalties regarding children’s information
- Data retention limitation
- Extended employee right moratorium
- Service provider/third party extended obligations