{"id":7967,"date":"2022-12-29T14:53:03","date_gmt":"2022-12-29T14:53:03","guid":{"rendered":"https:\/\/plumrocket.com\/blog\/?p=7967"},"modified":"2023-07-31T08:50:57","modified_gmt":"2023-07-31T08:50:57","slug":"ccpa-to-cpra-compliance","status":"publish","type":"post","link":"https:\/\/plumrocket.com\/blog\/ccpa-to-cpra-compliance","title":{"rendered":"From CCPA to CPRA: How to Stay Compliant"},"content":{"rendered":"\n

Over the last few years, privacy laws have evolved to protect individuals more than they ever have before. Many businesses operating in California state were enforcing security measures under the CCPA law, which has been effective since January 1, 2020. <\/p>\n\n\n\n

However, since the start of the year, California has been enforcing an amendment – the California Privacy Rights Act (CPRA), taking effect on January 1, 2023.  It brought with it a range of new obligations for organizations to comply with.<\/p>\n\n\n\n

How to move from CCPA to CPRA compliance? Let’s take a look at how Plumrocket\u2019s CPRA Extension<\/a> is helping eCommerce stores comply with the new legislation, and learn how to update your eCommerce store to be CPRA compliant.<\/p>\n\n\n\n

What is the Difference Between the CCPA and CPRA?<\/h2>\n\n\n\n

California Privacy Rights Act, or CPRA for short, is a ballot initiative that amends and expands the Consumer Privacy Protection Act of 2020. CPRA compliance is effective on January 1, 2023 and enforcement is expected to begin in June 2023.<\/p>\n\n\n\n

Compared to the CCPA, the CPRA gives Californians more control over the personal information businesses collect. The law requires businesses to disclose information they collect, such as details about how they use your data, who they share your data with, and where you can access your data.<\/p>\n\n\n\n

How Plumrocket Helps eCommerce Stores Become CCPA to CPRA Compliant?<\/h2>\n\n\n\n

To comply with the law, in addition to updating privacy policies, retailers must implement certain functionality on their eCommerce stores to notify California consumers about the law and let them exercise all their privacy rights.<\/p>\n\n\n\n

Since 2020, Plumrocket has been helping all Magento-based websites to stay compliant by installing the all-in-one CCPA extension on their stores, which has now been updated with new features to provide websites with CPRA compliance in the same easy and straightforward way. Let\u2019s go through the main law updates, and see how the Magento 2 CPRA extension<\/a> helps.<\/p>\n\n\n\n

  1. Right to Opt-Out of Third-Party Sales and Sharing:<\/strong><\/li><\/ol>\n\n\n\n

    In addition to \u201cselling\u201d under CCPA, the CPRA broadens this right to include the sharing of personal information. So, merchants are required to let California citizens request that businesses stop selling or sharing their personal information.<\/p>\n\n\n\n

    How Plumrocket Helps:<\/span><\/strong><\/p>\n\n\n\n

    The Magento 2 CPRA extension provides an updated \u201cDo Not Sell or Share\u201d page, which automatically appears on the website\u2019s footer. Once there, both registered and guest users can submit the \u201cDo Not Sell or Share My Personal Information\u201d request to the company.<\/p>\n\n\n\n

    \"Magneto<\/a><\/figure>\n\n\n\n
    1. Right to Correct Information<\/strong>: <\/li><\/ol>\n\n\n\n

      The CPRA includes a completely new right that does not appear in the CCPA. A consumer has the right to request that any incorrect personal information provided by a company be corrected.<\/p>\n\n\n\n

      How Plumrocket Helps<\/strong>:<\/span><\/p>\n\n\n\n

      In addition to the fact that Magento itself allows registered users to edit personal information in the Personal Information section, the CPRA extension offers an updated Privacy Center dashboard that includes the \u201cCorrect My Personal Information\u201d button. It allows all registered users and guests to submit the correction request by sending an email to the person in charge.<\/p>\n\n\n\n

      \"Magneto<\/a><\/figure>\n\n\n\n

       <\/p>\n\n\n\n

      1. Right to Restrict Use and Disclosure of Sensitive Personal Information<\/strong>: <\/li><\/ol>\n\n\n\n

        A consumer has the right to restrict the use and disclosure of their Sensitive Personal Information to \u201cuse that is necessary to execute the services or deliver the products reasonably expected by an ordinary consumer who requests such goods and services\u201d (as per SEC. 10. Section 1798.121 d).<\/p>\n\n\n\n

        How Plumrocket Helps<\/strong>:<\/span><\/strong><\/p>\n\n\n\n

        ECommerce stores are usually not subject to this requirement as the SPI is collected without the purpose of inferring characteristics about a consumer and is limited to what is necessary to provide goods or services. Therefore, the Magneto 2 CPRA extension by Plumrocket does not have this feature enabled by default, but if necessary, you can easily edit the \u201cDo Not Sell or Share\u201d page from the admin panel and add a \u201cLimit the Use of Sensitive Personal Information\u201d to the form.<\/p>\n\n\n\n

        Is My Company Impacted?<\/h2>\n\n\n\n

        The CPRA places new thresholds for what companies fall under the law, including:<\/p>\n\n\n\n