California Consumer Privacy Act (CCPA), Data Protection, Risk Assessment

California Finalizes CCPA Regulations on Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking: Key Provisions and...

Blank Rome LLP on 8/6/2025

The California Privacy Protection Agency (“CPPA”) finalized a set of regulations under the California Consumer Privacy Act (“CCPA”) on July 24, 2025, that address cybersecurity audits, risk assessments, and automated...more

What You Need to Know About California’s Finalized CCPA Amendments: Part Two

Polsinelli on 8/5/2025

On July 24, 2025, the California Privacy Protection Agency (CPPA) approved final regulations (the Rule) under the California Consumer Privacy Act of 2018 (CCPA), introducing new obligations related to automated...more

Analyzing the New CCPA Regulations

Troutman Pepper Locke on 8/4/2025

At its July 24 board meeting, the California Privacy Protection Agency Board authorized agency staff to finalize regulations on automated decision-making technology, risk assessments, cybersecurity audits, insurance, and...more

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on 8/1/2025

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Use of AI in Marketing and Digital Media - 2025 Playbook

BakerHostetler on 1/27/2025

Right now, we are all taking stock of the many important issues and challenges we saw crop up for clients last year, trying to predict what they will face in the coming year, and strategizing about how we can help....more

California Privacy Protection Agency’s Regulations on Automated Decision-Making Technology, Risk Assessments Delayed

Robinson+Cole Data Privacy + Security Insider on 3/22/2024

The California Privacy Protection Agency’s (CPPA) highly anticipated regulations for automated decision-making technology and risk assessment requirements are likely far from final. The CPPA met at the beginning of the month...more

California Privacy Protection Agency Board Votes to Advance Proposed Regulations to Formal Rulemaking

Alston & Bird on 3/14/2024

On March 8, 2024, the California Privacy Protection Agency (“CPPA”) Board voted to advance to formal rulemaking proposed regulations under the California Consumer Privacy Act, as amended, regarding risk assessments, automated...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

California Eyes New Privacy, Cyber, and AI Obligations

Wiley Rein LLP on 9/14/2023

California continues to forge ahead on potential new privacy, cybersecurity, and artificial intelligence (AI) obligations, including through its California Consumer Privacy Act (CCPA) rulemaking process and by launching a new...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

AI and Audits: Proposed CCPA Regulations Up for Discussion

Robinson+Cole Data Privacy + Security Insider on 9/8/2023

On September 8, 2023, the California Privacy Protection Agency (CPPA) will discuss the two new sets of proposed California Privacy Protection Act (CCPA) regulations. Here is a breakdown of the two new proposed regulations and...more

CPPA publishes new draft regulations addressing AI, risk assessments, cyber audits

Ballard Spahr LLP on 9/8/2023

The California Privacy Protection Agency (CPPA) recently published two new sets of draft regulations addressing a range of cutting-edge data protection issues. Although the CPPA has not officially started the formal...more

CPPA Publishes New Draft Regulations Addressing AI, Risk Assessments, and Cyber Audits

Ballard Spahr LLP on 9/6/2023

The California Privacy Protection Agency (CPPA) recently published two new sets of draft regulations addressing a range of cutting-edge data protection issues. Although the Agency has not officially started the formal...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

Enforcement of New CCPA Regulations Delayed By Court Ruling

Husch Blackwell LLP on 7/5/2023

Keypoint: Enforcement by the California Privacy Protection Agency of the new CCPA regulations will be delayed until March 2024, but the Agency can still enforce the CCPA statutory changes as of July 1, 2023....more

Develop a Process to Create Privacy Impact Assessments Under the Attorney-Client Privilege

ArentFox Schiff on 5/22/2023

Data protection assessments are required for high-risk processing activities in a rapidly growing set of federal, state, and international comprehensive privacy laws. These assessments are triggered by processing activities,...more

CPPA Approves Final CPRA Regulations, Invites Comments on Future Rulemaking Topics

Akin Gump Strauss Hauer & Feld LLP on 2/22/2023

On February 10, 2023, the California Privacy Protection Agency (CPPA) issued an invitation for public commentary on the topics that will be included in their future rulemaking: cybersecurity audits, risk assessments and...more

Universal Opt-Out/Global Privacy Control: Preparing for the New Online World

Dorsey & Whitney LLP on 12/7/2022

2022 has been a whirlwind year for cybersecurity, data, and privacy counsel who are navigating an expanding regulatory landscape and unique sets of legal requirements from numerous jurisdictions. This trend is likely to...more

California Privacy Law Nears Effective Date; Businesses Risk Million Dollar Penalties

Lerman Senter PLLC on 11/9/2022

The Consumer Privacy Rights Act (CPRA), which amended the California Consumer Privacy Act (CCPA), becomes fully effective on January 1, 2023. Businesses should review the new law and recent enforcement actions before the law...more

New York’s DFS Publishes A Cyber Insurance Risk Framework

Husch Blackwell LLP on 3/9/2021

Keypoint: New York’s Division of Financial Services (DFS) now requires Property and Casualty Insurers writing cyber insurance to comply with the Division’s Cyber Insurance Risk Framework to manage their risk. In her...more

HIPAA Compliance for Work-From-Home or Telehealth Programs: Five Frequently Overlooked Considerations

Carlton Fields on 6/18/2020

COVID-19 has challenged health care providers to change the way they offer services — from shifting to an increasingly remote workforce to diving into telehealth. These adjustments have privacy implications. The following are...more

Time to Check Your Cyber Insurance

Farella Braun + Martel LLP on 2/25/2020

Now that the CCPA is in effect, some companies will need to revise their policies. The cyber insurance markets are beginning to adapt to the new California Consumer Privacy Act (CCPA) which went into effect on January 1. ...more

CCPA – What is it and does this apply to my organization?

Hutchison PLLC on 2/13/2020

As many in the U.S. were ringing in the New Year on January 1, 2020, the long-anticipated California Consumer Privacy Act (CCPA) became effective. This statute’s main intent is to protect the privacy of California residents...more

[Event] CCPA Compliance: An Interactive Workshop - Multiple Dates/Locations, February 11th - 24th

McDermott Will & Schulte on 1/16/2020

Effective as of January 1, 2020, the California Consumer Privacy Act (CCPA) gives broad rights to people on their personal data in the custody of companies. This focus on data rights significantly raises the compliance burden...more

[Event] CCPA Compliance: An Interactive Workshop - Multiple Dates/Locations, Jan. 22nd - 30th

McDermott Will & Schulte on 1/14/2020

Effective as of January 1, 2020, the California Consumer Privacy Act (CCPA) gives broad rights to people on their personal data in the custody of companies. This focus on data rights significantly raises the compliance burden...more

California Consumer Privacy Act (CCPA) › Data Protection › Risk Assessment

"My best business intelligence, in one easy email…"