Atlas Systems Named a Representative Vendor in 2025 Gartner® Market Guide for TPRM Technology Solutions → Read More
What is CCPA / CPRA?
CCPA establishes baseline privacy rights, while CPRA enhances those rights through stricter accountability rules, expanded definitions of sensitive data, and new controls for vendors handling personal information. Organizations must manage data mapping, access rights, and vendor restrictions carefully. In TPRM, CPRA increases scrutiny on service provider contracts and monitoring practices.
FAQs
How does CPRA affect vendor contracts?
It adds specific requirements for data use limitations and audit rights.
What new governance expectations were introduced?
CPRA introduced record-keeping, risk assessments, and accountability measures for sensitive data.
Are CCPA and CPRA separate laws?
CPRA amends and builds on CCPA as part of a unified compliance framework.
Reinventing TPRM with
ComplyScore®
Learn how leading risk teams reduce cyber risk and protect compliance faster.