What is CPRA? What is CCPA?

The California Privacy Rights Act (CRPA) is an update to California Consumer Protection Act (CCPA). CPRA went into effect January 1, 2023 and will be enforced July 1, 2023. (CCPA went into effect January 1, 2020).

What is CPRA?

CPRA is a law designed to give California residents tools and rights when it comes to controlling how and where their data is used and sold across the internet.  California residents now have the right to ask any company/site to remove their data, and you will have to comply with that kind of request.

Is this different from GDPR?

It’s very similar - GDPR (the General Data Privacy Regulations) affects EU residents.  You have to ask EU residents to consent to sharing your information and provide a privacy policy on your site to declare what data you collect and how they can contact you to remove it.

With CRPA, the difference is that California residents need to ask to opt-out of this data sharing.  So all sites should have a link to allow publishers to do that, as well as a privacy policy.

(So if you have a privacy policy in place because of GDPR, you’re already off to a good start)

Will this affect my revenue?

It can!  The ad providers we work with are looking for people who have the appropriate opt-outs in places, so if you don’t do anything - it can hurt your ability to earn revenue.  (And unfortunately, because it’s a law there are the possibility of fines as well if you don't comply)

What do I need?

Because CRPA is a law, just like GDPR - we can’t tell you exactly what it is that you’ll need to be fully compliant (we aren’t lawyers and don’t know your specific circumstances).  You will need a privacy policy that’s up to date, that details how people can contact you to remove their information. And we recommend that you include a link on your footer that can take people directly to that portion of your privacy policy.

But if you have any further questions about the specifics for your site, you should speak with legal counsel.

I read a blog post that says bloggers aren't eligible if they don't sell a product?

SHE Media worked with industry leaders, our legal team and our ad technology team to really understand what’s required of CPRA for our publishers.  And through their understanding, all bloggers who earn revenue from ad networks need to comply with CPRA.

What is SHE Media doing?

We have worked with industry leaders to help set the guidelines for how ad networks can see who has completed certain steps to be compliant, and what information and signals can be passed along the ad supply chain to maintain that integrity.  We are compliant from a legal/technical standpoint, and will continue to monitor any changes or shifts in interpretations of the law to make sure that we remain compliant.

We will continue to integrate technology to make it easier for our publishers to become compliant, too.

Where do I start?

SHE Media's legal team (and our ad technology experts) put together a memo in 2020 filled with steps that you can take to help you become compliant.  (But again, we recommend you consult with an attorney if you have any specific questions or concerns)  It's an excellent place to start.