As companies prepare for the looming enforcement of the California Privacy Rights Act (CPRA), which is going into effect on Jan. 1, 2023, some hope to rely on their legal teams to take on some of the new responsibilities—such as facilitating data subjects’ requests to correct inaccurate personal information.

While legal departments will inevitably play critical roles in helping companies stay compliant with new data privacy requirements, experts suggest it won’t be enough. Organizations will need to have compliance teams and workflows in place to support their legal departments as privacy laws continue to expand the rights of consumers.