Companies throughout the ad tech ecosystem are reckoning with the fact that, due to the revised definition of “business purpose” in the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), they may no longer qualify as “service providers” under California privacy law. Instead, they might be treated as “third parties” – and possibly even as “businesses.” As a result, their compliance obligations are likely to be more challenging.
From our base in New York, we represent a diverse range of clients across the country and around the world.
Insights + Events