Certified Information Privacy Professional – United States (CIPP/US) — Question 99

The California Privacy Rights Act (CPRA) expands upon a number of topics previously introduced in the California Consumer Privacy Act (CCPA). Which of the following was already part of the CCPA?

Answer options

• A. Risk assessments.
• B. Cybersecurity audits.
• C. Private right of action.
• D. Automated decision-making.

Correct answer: C

Explanation

The correct answer is C, as the CCPA included a private right of action for consumers to sue businesses for certain violations. Options A and B, risk assessments and cybersecurity audits, were not part of the CCPA but were introduced with the CPRA. Option D, automated decision-making, is also a new concept under the CPRA.