The California Privacy Rights Act (CPRA) is a California law passed in November 2020 that significantly expanded the CCPA. Its provisions took effect January 1, 2023, establishing the California Privacy Protection Agency (CPPA) — the first dedicated privacy enforcement agency in the US. Key additions include the right to correct personal information, the right to limit use of sensitive personal information, expanded opt-out rights covering data "sharing" (not just "selling"), and tripled fines for violations involving minors' data. For website operators using targeted advertising or behavioral analytics, CPRA compliance typically requires an updated cookie consent mechanism and a revised privacy policy.