California Privacy Rights Act of 2020: exemptions.

Existing law, the California Privacy Rights Act of 2020 (CPRA) , approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to require the business to delete personal information about the consumer, as specified. The CPRA, until January 1, 2023, exempts from certain provisions of the act personal information reflecting a communication or a transaction between the business and a company, partnership, sole proprietorship, nonprofit, or government agency that occurs solely within the context of the business conducting due diligence or providing or receiving a product or service. The CPRA, until January 1, 2023, also exempts from certain provisions of the act personal information that is collected and used by a business solely within the context of having an emergency contact on file, administering specified benefits, or a person's role or former role as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or an independent contractor of that business. This bill would extend those above-described exemptions indefinitely. The California Privacy Rights Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.