ACC NCR Roadmap 60 Days To CPRA Compliance

The California Privacy Rights Act comes into effect on January 1, 2023. Among its new requirements is a new data retention provision. Personal and sensitive information must be disposed of when its purpose has been fulfilled, and the organization must disclose the retention policy at the time of collection. Additionally, the data retention policies apply to data collected on or after January 1, 2022. Under CPRA, companies can no longer simply hold individuals’ personal data forever; they must have robust data retention and disposal practices. Join us to learn how to establish or enhance your data retention practice.

Every organization has data retention policies, but very few actually operationalize them. CPRA shines a light on these practices and holds organizations accountable for them. The regulation also establishes a new enforcement agency, which indicates increasingly vigorous enforcement as CPRA goes into effect. Data breach risks are also heightened, as litigators can easily show negligence when data is kept beyond its retention period. We will share practical steps you can implement to ensure disposal of your company's data is efficient and in compliance with the CPRA.

Presented by Robert Fowler, Director of Strategic Partnerships at Exterro, Iliana Peters, Shareholder at Polsinelli and Mary Blatch, Regulatory and Data Privacy Counsel at CFA Institute.

1.5 Hours of VA MCLE credit pending.