Consumer Reports comments on the California Privacy Protection Agency’s proposed privacy rules

Consumer Reports submitted comments to the California Privacy Protection Agency on its proposed regulations interpreting the California Privacy Rights Act. The CPRA was passed by a ballot initiative in 2020 and goes into effect next year. It expands existing privacy protections for California residents in a number of ways, including new protections for children and sensitive personal information.

CR is largely supportive of the proposed regulations and suggested additional language on the following topics:

  • Opt-out preference signals
  • Consent and dark patterns
  • Non-retaliation
  • Transparency
  • Consumer complaints
  • Retargeting
  • Requests to opt out and limit the use of sensitive personal information, and
  • Data minimization and purpose limitation