In 2018, California adopted the most extensive privacy provisions in the United States, the California Consumer Privacy Act of 2018 (CCPA.) Emulating provisions adopted in Europe’s General Data Protection Regulation (GDPR), the CCPA gives California consumers of certain, generally larger, businesses rights relating to the use and sale of personal information like names, addresses or internet purchasing history. In general, the CCPA provides consumers with the right to learn what categories of personal information are collected or sold; to request businesses delete their personal information or opt-out of the sale of their personal information; and creates liability for failing to reasonably protect consumers’ personal information. California residents voted 56%-44% in the November 2020 election to amend and expand the CCPA through the passage of Proposition 24, the California Privacy Rights Act (CPRA). Proposition 24 imports more of the GDPR’s provisions, providing