California Consumer Privacy Act (CCPA), Data Management

New CCPA Regs: Part 1: Dark Patterns

Fox Rothschild LLP on 5/7/2025

New California Consumer Privacy Act (CCPA) Regs are here, with comments open until June 2. There are a lot of issues to address, and a lot of work for companies to implement. We are talking about billions of dollars in...more

Location, Location, Location: California Attorney General Investigative Sweep and State Law Proposal Target Location Data

Clark Hill PLC on 3/17/2025

On March 10, the California attorney general’s office announced an “ongoing investigative sweep into the location data industry” (“investigative sweep”) for compliance with the California Consumer Privacy Act’s (“CCPA”)...more

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on 11/18/2024

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on 11/11/2024

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

California Extends Privacy Law to Cover Neural Data

Baker Botts L.L.P. on 10/11/2024

On September 29, 2024, California took a significant step forward in data privacy protection by passing a law that extends the California Consumer Privacy Act (CCPA) to cover neural data—brain activity and related information...more

California Protects Neural Data

Nelson Mullins Riley & Scarborough LLP on 10/3/2024

California Governor Gavin Newsom approved an amendment to the California Consumer Privacy Act (CCPA) extending privacy rights to a person’s neural data. Neural data is defined as information that is generated by measuring the...more

No Money, Mo’ Problems: DoorDash CCPA Enforcement Action Emphasizes Personal Information “Sales” Aren’t All About the Benjamins

Wyrick Robbins Yates & Ponton LLP on 3/13/2024

The California Attorney General (“AG”) recently delivered (pun very much intended) a public CCPA enforcement action against DoorDash, its second following the 2022 settlement with Sephora. The DoorDash action stems from a...more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

California Privacy Protection Agency Launches New Website with Privacy Rights Resources

Robinson+Cole Data Privacy + Security Insider on 1/26/2024

Last week, the California Privacy Protection Agency (CPPA) launched a new website dedicated to providing resources to California residents about their privacy rights under the California Consumer Privacy Act (CCPA). The...more

California Privacy Protection Agency Grapples with Cybersecurity Audit, Risk Assessment, Automated Decisionmaking Technology...

Epstein Becker & Green on 12/27/2023

On December 8, 2023, the California Privacy Protection Agency (“CPPA”) Board (the “Board”) held a public meeting to discuss, among other things, regulations addressing: (1) cybersecurity audits; (2) risk assessments; and (3)...more

CPPA Proposes More Revisions to CCPA

Robinson+Cole Data Privacy + Security Insider on 12/27/2023

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

Annual Updates to Privacy Policies Reminder and Looking Ahead to 2024

Wiley Rein LLP on 12/14/2023

The end of the year is a good time to revisit your organization’s privacy policy to ensure it is accurate and up to date. Notably, at least one state privacy law – the California Consumer Privacy Act (CCPA) – requires that a...more

Modified Privacy Regulations May be on the Horizon

CDF Labor Law LLP on 12/7/2023

On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal...more

California Enacts One-Stop Mechanism for Data Broker Deletion Requests

Wilson Sonsini Goodrich & Rosati on 10/26/2023

California residents may soon be able to click “backspace” on data brokers doing business in the state. On October 10, 2023, California Governor Gavin Newsom signed Senate Bill 362, colloquially known as the Delete Act, into...more

Cracks in the State Privacy Law Foundation: State Privacy Law Challenges See Success in District and State Courts

Wiley Rein LLP on 10/6/2023

A recent spate of successful legal challenges has provided some relief from the ever-swelling wave of state privacy laws. The legal bases of these challenges vary, but taken together, they highlight that state privacy laws –...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

AI and Audits: Proposed CCPA Regulations Up for Discussion

Robinson+Cole Data Privacy + Security Insider on 9/8/2023

On September 8, 2023, the California Privacy Protection Agency (CPPA) will discuss the two new sets of proposed California Privacy Protection Act (CCPA) regulations. Here is a breakdown of the two new proposed regulations and...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

DIFC Issues Landmark Adequacy Decision Regarding the California Consumer Privacy Act

Akin Gump Strauss Hauer & Feld LLP on 8/18/2023

On August 7, 2023, the Commissioner of Data Protection of the Dubai International Financial Centre (the DIFC), a financial free-zone in the United Arab Emirates, issued the first adequacy decision regarding the California...more

CPPA Announces Investigation of Connected Vehicle Manufacturers’ Privacy Practices

Robinson+Cole Data Privacy + Security Insider on 8/18/2023

Recently, the California Privacy Protection Agency (CPPA) announced its new initiative in investigating the data privacy practices of connected vehicle (CV) manufacturers and the related technologies. Generally, the CPPA will...more

California Court Checks Enforcement Authority of New Privacy Agency

Akerman LLP on 8/10/2023

Background - Enforcement of the California Privacy Rights Act of 2020 (CPRA) Final Regulations by the California Privacy Protection Agency was put on hold June 30, 2023, by a California Superior Court, just before...more

Investigative Sweep of Employers’ CCPA Compliance by the California Attorney General

Robinson+Cole Data Privacy + Security Insider on 8/4/2023

The California Attorney General recently announced an initiative to investigate employers’ non-compliance with the California Consumer Privacy Act/California Privacy Rights Act (collectively the CCPA)....more

California Privacy Protection Agency Announces CCPA Enforcement Focus

Robinson+Cole Data Privacy + Security Insider on 7/28/2023

A plan for an enforcement program under the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA) (collectively CCPA) is on its way from the California Privacy Protection Agency (CPPA). Despite a recent...more

The California Attorney General and the California Privacy Protection Agency Are Accelerating Enforcement on CCPA/CPRA...

Epstein Becker & Green on 7/27/2023

California businesses, including employers, who have not already complied with their statutory data privacy obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA),...more

California Consumer Privacy Act (CCPA) › Data Management

"My best business intelligence, in one easy email…"