CCPA established the baseline; CPRA extends it with additional rights and the California Privacy Protection Agency as enforcer.
About two-thirds of the canonical keys are shared with GDPR — if GDPR is already seeded, CCPA/CPRA adds the distinctive California-specific notices and the opt-out-of-sale mechanism on top.