The CPRA’s enhancement of the existing CCPA brings California privacy law into closer alignment with the European General Data Protection Regulation (GDPR). Among other additions, the CPRA creates new rights for consumers, adds new governance and transparency obligations for in-scope businesses, introduces a new sensitive data classification, extends data breach liability, and establishes a dedicated agency to interpret and enforce the new law.