The California Privacy Rights Act (CPRA): An implementation and compliance guide
About this ebook
- In-depth exploration of CPRA jurisdiction and material scope
- Detailed coverage of consumer rights and business responsibilities
- Explanation of security requirements, breach notifications, and penalties
- Understand CPRA's territorial and material jurisdiction
- Identify key CPRA definitions such as personal information and pseudonymization
- Learn about consumer rights, including access, deletion, and opt-out
- Explore the obligations of businesses under the CPRA
- Gain insight into security requirements for businesses
- Review penalties associated with CPRA non-compliance
The ideal audience for this book includes business owners, legal professionals, compliance officers, and privacy advocates. It is essential that readers have a basic understanding of privacy laws and consumer protection regulations. No prior knowledge of the CPRA is required, though familiarity with privacy-related concepts will be helpful. This book serves as a valuable resource for those seeking to understand or comply with California's evolving privacy standards.
About the author
IT Governance Publishing (ITGP) is the world's only specialist IT governance publisher. We produce books, toolkits and training aids on a wide range of topics including information security, IT governance, information risk, compliance, cyber security, IT service management, project management and management system standards.
Preston Bukaty is an attorney and consultant. He specializes in data privacy GRC projects, from data inventory audits to gap analyses, contract management, and remediation planning. His compliance background and experience operationalizing compliance in a variety of industries give him a strong understanding of the legal issues presented by international regulatory frameworks. Having conducted more than 3,000 data mapping audits, he also understands the practical realities of project management in operationalizing compliance initiatives. Preston's legal experience and enthusiasm for technology make him uniquely suited to understanding the business impact of privacy regulations such as the GDPR (General Data Protection Regulation) and the CPRA. He has advised more than 250 organizations engaged in businesses as varied as SaaS platforms, mobile geolocation applications, GNSS/telematics tools, financial institutions, fleet management software, architectural/engineering design systems, and web hosting.
