Okta’s Response to California’s Likely Passage of Ballot Proposition 24, and Creation of the California Privacy Rights Act of 2020

On Election Day, Californians’ voices were loud and clear: by a wide margin, voters approved Ballot Proposition 24, also known as the California Privacy Rights Act of 2020 (“CPRA”). While some votes are still being counted, the proposition appears headed for approval. The CPRA amends and expands certain provisions of the California Consumer Privacy Act, and creates the California Privacy Protection Agency, which will become the regulator responsible for implementing and enforcing both the CPPA and CPRA. The CPRA will take effect on January 1, 2023, with an enforcement date of July 1, 2023.
 
At Okta, the protection of personal data of our customers, prospective customers, users, employees, and partners is of paramount importance. We take privacy extremely seriously and ensure that personal data is kept secure and only used for the purposes that we communicate transparently. We applaud the CPRA’s emphasis on strong security measures to protect personal data, which aligns with Okta’s belief that a comprehensive security program is strengthened when identity and access management, including multi-factor authentication, is its keystone.
 
We welcome the arrival of the CPRA and the changes it will bring to California. There are still many steps ahead, as the state implements, clarifies, and issues guidance regarding the new law. Okta will be following these proceedings closely and, when appropriate, we will provide our input to these important conversations.

We note that many organizations and public interest groups have voiced concerns about the CPRA, which we take seriously. We hope and trust that a multi-stakeholder approach to implementing the new regulations will ensure clarity, fairness, and strike the appropriate balance between protecting individuals’ privacy rights and fostering innovation that can, in turn, help keep personal data more safe and secure.
 
Okta also holds firm to our long-standing belief that in the long run, the United States needs a comprehensive, progressive, and well-balanced federal privacy law, to ensure that consumers across the country have equal privacy rights and expectations. We hope that Californians’, and all Americans’, clearly-expressed desires for reform in this critical area are heard at the national level.
 
We are committed to assisting our customers on their privacy compliance journeys, and we are committed to complying with the applicable elements of the CPRA in our provision of the Okta Service to all of our customers. For additional information and resources, please refer to Okta’s Privacy Policy and our Trust & Compliance documentation.
 
If you or your organization has any additional questions or concerns, please contact us at [email protected].