How the California Privacy Rights Act reshapes U.S. privacy compliance in 2023

The U.S. privacy landscape is on the edge of a new era.

Next year, companies ranging from brands and publishers to agencies and ad tech intermediaries will need to comply with new privacy laws in Colorado, Connecticut, Utah, Virginia and -- of course -- California, where the existing California Consumer Privacy Act will give way to the even more comprehensive California Privacy Rights Act, or CPRA.

“CPRA definitely raises the bar,” said Fiona Campbell-Webster, chief privacy officer at ad tech firm MediaMath.

In this video, Digiday senior media editor Tim Peterson speaks with privacy experts about how the CPRA ups the ante on companies’ privacy compliance requirements in the U.S. and breaks down the Interactive Advertising Bureau’s effort with the Multi-State Privacy Agreement to simplify the contractual complications required to comply with all five state-level privacy laws taking effect in 2023.

“If a company is sharing cookie data in order to track users or sharing information with vendors to track users across multiple websites that are not owned by the advertiser, that’s when the alarm bells go offer,” said Dominique Shelton Leipzig, a partner at the law firm Mayer Brown.

[DeniseSkinnerDeniseSkinner]

And why is it if I take like a selfie as a profile photo when I scan it to see what comes up? Within my own photo I had taken with my. Camera on my personal device. Why is it that all kinds of things come? Have a price tagbonnet some do not the results of a scan when you scan with Google scan. D, I feel as though perhaps I'm wrong. What exactly is the meaning behind selling my even my own profile or even bits and pieces of it.

[DeniseSkinnerDeniseSkinner]

And what if they were doing sexual advertising? Using my name, my email without my consent. Yeah Someone opped me out of my own phone number and email and they were using my. Personal data for sexual purposes

[DeniseSkinnerDeniseSkinner]

What is California's definition of sensitive Dada? Exactly what do they consider sensitive data? And where is the line drawn?
John
Or determined

[DeniseSkinnerDeniseSkinner]

And within different application. You can go down the list of permissions it gives you an option. To agree or disagree. There are times when you disagree. You press disagree, turn the page, To continue searching then by goingredients back. I witnessed that the permission now reads agree when I checked off disagree And to test my observation to make sure that I was not in the wrong of how I pressed disagree. I went back-and-forth back and forth many times to see if I press disagree and go on to something else and then go back to see if indeed, what I observed was happening every time. And move On from that particular screen, it would go back to I sure that a robot cannot do this type of can it or who was programming it behind the scenes?

[umasobservations]

How does this impact the nightmare terms of service to some healthcare portals, where you must give them publication rights to ALL your health info in perpetuity?

[zacklarez]

I went to a stakeholder session of the newly-formed California Privacy Protection Agency yesterday and got introduced to this world for the first time. Before that, my experience was purely in combating AI generated images.

This reform and regulation is absolutely necessary in my opinion. The fact that large companies are resisting is just more evidence that they have been plundering our data and disregarding our rights. The reaction is only because they had previously been getting away with it.

[TheBladepolisher]

Thank you so much for this extremely informative video. I'm kind of new to this privacy law area, and this video helped. I'm here because of a site I wanted to purchase merchandise from had a privacy policy that did not offer an opt out option and the policy itself seemed a little harsh and somewhat lacking in information. They provided no information as to what states law they were adhering to.
Question: I live in California and the company I'm trying to purchase from is Montana. Do I surrender my "opt-out" rights because the site is listed as being in Montana?
It wasn't my intention to get this involved, all I wanted to do is purchase a hat. I've made it a habit to always check a internet companys privacy policy because I consider what's mine is mine and no one else has a right to share it with anyone, whether for profit or not.
Would you be kind enough to respond ? ? I noticed that none of the comments have recieved as much as a thank you for writing. Please, take trhe time and be kind.