Amended California Consumer Privacy Act (Prop. 24) set to become effective Jan 1 2026

What happened

In November 2020 California voters passed Proposition 24, amending the 2018 CCPA and creating the California Privacy Protection Agency. The amended CCPA and the Delete Act will take effect on January 1 2026.

Why it matters for trust and compliance

• Its status is in effect. It is in force now.
• The upcoming effective date expands privacy rights, adds data‑broker obligations, and establishes a dedicated enforcement agency in California.
• Takes effect January 1, 2026.
• It relates to CCPA/CPRA. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Confirm access, correction, deletion and opt-out requests are handled within the required time.
4. Inventory where this data is shared or sold and whether opt-outs are honoured.
5. Map the security requirements to existing controls and close gaps.
6. Inventory AI or automated decision systems in scope and their assessments.
7. Schedule or refresh the risk or impact assessments this calls for.