California Consumer Privacy Act (CCPA), Data Privacy, Risk Assessment

New California Regs Will Impact Your AI and Privacy Policies: FAQs on Automated Decision-Making, Risk Assessments, and...

Fisher Phillips on 8/1/2025

California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on 8/1/2025

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

HealthTech Due Diligence: Key Privacy/Security Factors

Orrick, Herrington & Sutcliffe LLP on 8/1/2025

Join Thora Johnson and Jeremy Sherer to learn about: Evaluating compliance through privacy notices Key questions to address, from leadership accountability to employee training...more

CPPA Approves New CCPA Regulations on AI, Cybersecurity, and Risk Governance, and Advances Updated Data Broker Regulations

Wilson Sonsini Goodrich & Rosati on 8/1/2025

On July 24, 2025, the California Privacy Protection Agency (CPPA) Board voted to approve a long-awaited rulemaking package imposing substantial new compliance obligations on businesses subject to the California Consumer...more

The CCPA’s automated decisionmaking tool rules: New consumer rights and compliance challenges

Eversheds Sutherland (US) LLP on 7/31/2025

On July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously adopted a comprehensive rulemaking package under the California Consumer Privacy Act (CCPA) that primarily addresses automated decisionmaking...more

California Finalizes CCPA Regulation Amendments: New Compliance Obligations for Cybersecurity, Risk Assessments, and Automated...

Nelson Mullins Riley & Scarborough LLP on 7/30/2025

On July 24, 2025, the California Privacy Protection Agency (CPPA) Board approved a final package of amendments to the regulations implementing the California Consumer Privacy Act (CCPA). These sweeping changes impose...more

California Privacy Protection Agency (CPPA) Finally Voted to Adopt Much Debated Update to CCPA Regulations: What Your Business...

Seyfarth Shaw LLP on 7/28/2025

On July 24, 2025, the California Privacy Protection Agency (“CPPA”) unanimously voted to adopt a package of Proposed Regulations for the California Consumer Privacy Act (“CCPA”), marking a significant development in...more

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

Katten Muchin Rosenman LLP on 7/28/2025

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

CPPA moves closer to finalizing amended CCPA regulations

McDermott Will & Emery on 7/25/2025

As the California Privacy Protection Agency (CPPA) prepares for its July 24, 2025, meeting, it released a revised set of California Consumer Privacy Act (CCPA) regulations that contain modest changes to the ones it released...more

California Regulator Releases Updated Draft Regulations, Scales Back Proposed AI Privacy Rules

Sheppard Mullin Richter & Hampton LLP on 5/28/2025

California appears to be changing its approach to how it regulates artificial intelligence, likely reflecting its reaction to challenges seen recently in other states. Namely, the California Privacy Protection Agency recently...more

California privacy agency opens comment period on regulations

Orrick, Herrington & Sutcliffe LLP on 5/19/2025

On May 9, the California Privacy Protection Agency (CPPA) announced it opened the formal public comment period for its proposed regulations concerning updates to the California Consumer Privacy Act. The proposed rules would...more

California Privacy Regulator Approves Trimmed-Down Regulations

Davis Wright Tremaine LLP on 5/19/2025

On May 1, the California Privacy Protection Agency ("CPPA") board (the "Board") met to discuss revisions to proposed regulations relating to cybersecurity audits, risk assessments, and automated decision-making technologies...more

California Privacy Protection Agency Releases Updated Regulations: What’s Next?

Robinson+Cole Data Privacy + Security Insider on 5/16/2025

This month, the California Privacy Protection Agency (CPPA) Board discussed updates to the California Consumer Privacy Act (CCPA) draft regulations related to cybersecurity audits, risk assessments, automatic decision-making...more

Buckle Up! CPPA Is Driving Privacy Regulation and Enforcement Forward

Perkins Coie on 5/13/2025

After a relatively slow start to 2025, the California Privacy Protection Agency (CPPA) is firing on all cylinders now. In recent weeks, the CPPA (i) revised the proposed Delete Request and Opt-out Platform (DROP) regulations...more

CPPA Issues Revised Draft CCPA Regulations; Votes to Initiate Public Comment Period

Alston & Bird on 5/12/2025

On May 1, 2025, the California Privacy Protection Agency (“CPPA”) Board convened to discuss revisions to the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic...more

AI Deregulatory Trends Continue; CPPA Board Proposes Revised Draft Regulations on Automated Decision-Making Technology, Risk...

Kilpatrick on 5/9/2025

The California Privacy Protection Agency (“CPPA”) Board released newly modified draft regulations addressing automated decision-making technology (“ADMT”), risk assessments, and cybersecurity audits under the California...more

CPPA Board Grapples with Public Concerns: Key Updates on Upcoming AI, Risk Assessment, and Cybersecurity Regulations

Wilson Sonsini Goodrich & Rosati on 4/17/2025

On April 4, 2025, the California Privacy Protection Agency (CPPA) Board met to discuss the latest draft California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, risk assessments, automated...more

CPPA Signals Significant Revisions Ahead

Perkins Coie on 4/14/2025

Key Takeaways - - The California Privacy Protection Agency (CPPA) is substantially revising its draft privacy regulations. - Definitions for automated decision-making technology (ADMT) and "significant decisions" are...more

CPPA Releases Updates to Proposed CCPA Regulations

McDermott Will & Emery on 3/28/2025

In advance of its April 4, 2025, board meeting, the California Privacy Protection Agency (CPPA) released a discussion draft of revisions to its proposed California Consumer Privacy Act (CCPA) regulations. These revisions...more

Use of AI in Marketing and Digital Media - 2025 Playbook

BakerHostetler on 1/27/2025

Right now, we are all taking stock of the many important issues and challenges we saw crop up for clients last year, trying to predict what they will face in the coming year, and strategizing about how we can help....more

California’s Privacy Regulator Had a Busy November, Automated Decisionmaking Edition: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on 12/12/2024

In the second in our series of new CCPA regulations from California, we look at proposed rules for use of automated decisionmaking technology. As a reminder, CCPA discusses these technologies in relation to profiling, namely...more

More Proposed Regulations from California: What Do These Mean for Your Business?

Hinshaw & Culbertson - Privacy, Cyber & AI... on 7/30/2024

What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more

CPPA Board Declines to Advance CCPA Regulations to Formal Rulemaking; CPPA Highlights Enforcement Priorities

Alston & Bird on 7/22/2024

On July 16, 2024, the California Privacy Protection Agency (the “CPPA”) board declined to advance to formal rulemaking California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments,...more

California Privacy Protection Agency’s Regulations on Automated Decision-Making Technology, Risk Assessments Delayed

Robinson+Cole Data Privacy + Security Insider on 3/22/2024

The California Privacy Protection Agency’s (CPPA) highly anticipated regulations for automated decision-making technology and risk assessment requirements are likely far from final. The CPPA met at the beginning of the month...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

California Consumer Privacy Act (CCPA) › Data Privacy › Risk Assessment

"My best business intelligence, in one easy email…"