Secure Controls Framework
Download The SCF
CCPA/CPRA

What does CPRA require for Sensitive Personal Information?

Direct Answer

CPRA created a new category - Sensitive Personal Information - including precise geolocation, race, religion, health information, financial account details, biometric data, and sexual orientation. Consumers can direct businesses to limit use and disclosure of Sensitive Personal Information to what is necessary for the requested service. Businesses must respond to these requests within 15 business days.

Keep Exploring

Relevant Resources

References

Authoritative Sources