CPRA Privacy Platform - California Privacy Rights Act | DataGrail

It's time to uphold people's privacy rights. DataGrail powers the world's most trusted companies to understand and satisfy CCPA/CPRA requirements.

What is California Privacy Rights Act (CPRA)?

CPRA is effective January 1, 2023.

The California Privacy Rights Act is legislation that updates, expands, and amends 2018’s California Consumer Privacy Act (CCPA). It includes employees, contractors, and business contacts as “consumers” (data subjects), creates new obligations for handling "sensitive personal information," and grants all Californians strengthened rights over their personal data.

It also introduces GDPR-style data minimization, use limitation, and risk mitigation obligations.

Learn More Jump to Resources

Who does CPRA apply to?

CPRA applies if you have:

  1. More than $25M in annual gross revenue (revenue generated anywhere, not just California).
  2. More than 100K consumers, households, or devices in your database (under CCPA it was <50K).
  3. At least half yearly income from selling or exchanging personal information about customers.

How DataGrail Helps

Make CPRA Your Differentiator

Respect Personal Data Decisions

Data Subject Requests

Employees and consumers alike have the right to ask businesses to access and delete their data. Automate the process for them to build brand trust and save your team’s time.

STREAMLINE PRIVACY REQUESTS

Put the Power in Consumers' Hands

Opt-Out Support

Consumers are increasingly opting out of their data being shared for advertising purposes. Lead with respect and prevent their data from being sold, bartered, exchanged, or monetized.

HANDLE OPT-OUTS

Go Beyond the Template

Privacy Assessments

When it comes time to complete a Data Protection Impact Assessment (DPIA) or Privacy Impact Assessment (PIA), rely on a solution that leverages 1,700+ deep integrations to auto-populate responses.

AUTOMATE DPIAs & PIAs

Future-Proof Against Risk

Uphold Brand Trust

The legislative landscape around privacy is changing every day. DataGrail keeps request policies and functionality up-to-date to support compliance with CPRA, GDPR, and whatever comes next.

THE PRIVACY AWAKENING

How DataGrail Can Help

It's time to see what a Privacy Control Center can do for you.

CPRA Requirements

Handle It with DataGrail

Centralize privacy requests (DSRs) like Access, Deletion, Portability, and others.

Request Manager - Branded intake forms, Operations Dashboard, search and filters.

Verify requestor identity, proportionally.

Smart Verification™ using pre-existing data with Authorized Agent support.

Fulfill DSRs safely, collaboratively, and on time.

Customizable SLAs and workflows, authorized handoffs, and alerts.

Honor Do Not Sell or Share opt-out requests.

Multichannel handling with GPC opt-out signal recognition.

Document your data and processing purposes.

Auto-detect systems and personal data types, generating dynamic RoPAs.

Maintain data maps and processing records.

Proprietary taxonomy and exports driving standardized summaries.

Conduct Data Protection / Privacy Impact Assessments.

Assess vendors and high-risk processing activities at scale.

Take holistic stock of your privacy footprint.

Tight integrations with 2,500+ apps and platforms, from salestech to HRIS.

Focus your internal teams on their most strategic work.

Access to a dedicated privacy manager who helps build a scalable program and manage DSR processes.

Get Up to Speed Fast on CPRA

Official Guide to CCPA

In this guide, we unpack the most important CCPA updates to explore how you can best prepare your privacy and data protection program.

Read the Guide

5 Things to Know: CPRA, Cookies and Consent

As of Jan. 1, 2023 businesses must give Californians a clear opt-out option when asking to “share” their data with adtech companies and related analytics providers, with few legal exceptions.

Read the Guide

CISOs Guide to CPRA

Big changes come into play with CPRA. Learn what the top big changes are, and how to modify your privacy program to stay in privacy compliance and reduce risk.

Read The Guide

CPRA Compliance

Learn how to establish data privacy protections, when your organization needs to be ready, and what CPRA requirements entail.

Get the Checklist

CPRA and Employee Rights

Starting January 1st, 2023, Californian employees gain privacy rights. DataGrail's guide untangles how this new regulations impacts your business, and how to prepare.

Read the Guide