With the holidays upon us, companies are assessing year-end to-do’s and considering what 2023 will bring. For companies employing California residents, compliance with the new California Privacy Rights Act (CPRA) should be at the top of their list. Indeed, to date, companies that employed California residents had a reprieve from the consumer-facing rules and requirements of the California Consumer Privacy Act (CCPA). The CCPA, which is, essentially, a data privacy “bill of rights” for Californians, even impacted many companies based outside of California but only as to their consumer-side relationships.