Kristen Mathews spoke to Bloomberg Law about the latest changes to the California Privacy Rights Act (CPRA), which are set to take effect January 1, 2023.
According to Kristen, changes to be implemented with the passage of the CPRA are certain to cause a headache for businesses, many of whom have just gotten a solid grip around the California Consumer Privacy Act (CCPA).
“From the in-house counsel perspective, they’re already exhausted from having to implement back-end and front-end changes to comply with the CCPA, which they were doing throughout last year,” Kristen said. “To have to pick up the pen again and rework what they did is really frustrating.”
She added that although some changes, such as amending privacy policies, may take relatively little time, others – such as establishing retention schedules for different types of data – are more onerous to implement and require different departments within businesses to work together.
Read the full article (subscription required).