California Consumer Privacy Act (CCPA), Regulatory Agenda, Cybersecurity

California Senate Bill Seeks to Curb Cookie-Related CIPA Litigation

Seyfarth Shaw LLP on 5/19/2025

California Senate Bill 690 (SB 690), introduced by Senator Anna Caballero, is continuing to proceed through the California state legislative process. The proposed bill would amend the California Invasion of Privacy Act (CIPA)...more

Buckle Up! CPPA Is Driving Privacy Regulation and Enforcement Forward

Perkins Coie on 5/13/2025

After a relatively slow start to 2025, the California Privacy Protection Agency (CPPA) is firing on all cylinders now. In recent weeks, the CPPA (i) revised the proposed Delete Request and Opt-out Platform (DROP) regulations...more

Key Themes From the 2025 IAPP Global Privacy Summit

Skadden, Arps, Slate, Meagher & Flom LLP on 5/5/2025

On April 23 and 24, 2025, regulators, industry leaders and data privacy leaders from across the globe convened in Washington, D.C. for the 2025 International Association of Privacy Professionals (IAPP) Global Privacy Summit....more

Data Privacy Day Checklist: Top 10 ways to protect your organization's data

Constangy, Brooks, Smith & Prophete, LLP on 1/27/2025

Tomorrow is International Data Privacy Day, so a happy day to all! More seriously, data privacy concerns and legislation continue to rapidly increase. It has been estimated that by the end of 2024 more than 75 percent of...more

California’s Privacy Regulator Had a Busy November: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on 12/9/2024

The California Privacy Protection Agency released proposed CCPA rules for a variety of topics in November, as well as announcing an investigative sweep for compliance with the Delete Act. Topics include the following, which...more

Post-Election Privacy & Cybersecurity Law Developments to Watch

Foley Hoag LLP - Security, Privacy and the... on 11/11/2024

What should privacy and cybersecurity practitioners and specialists consider after the 2025 inauguration? There are a few notable issues that may shape how businesses think about their privacy and cybersecurity programs: ...more

More Proposed Regulations from California: What Do These Mean for Your Business?

Hinshaw & Culbertson - Privacy, Cyber & AI... on 7/30/2024

What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more

Draft CCPA Regulations Stalled as Agency Struggles With Applicability of ADMT Rules

McDermott Will & Emery on 7/23/2024

On July 15, 2024, the California Privacy Protection Agency (CPPA) released proposed updates to the California Consumer Privacy Act (CCPA) regulations, including updates to the draft risk assessments, automated decisionmaking...more

CPPA Board Declines to Advance CCPA Regulations to Formal Rulemaking; CPPA Highlights Enforcement Priorities

Alston & Bird on 7/22/2024

On July 16, 2024, the California Privacy Protection Agency (the “CPPA”) board declined to advance to formal rulemaking California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments,...more

California Appellate Court Empowers Privacy Agency to Immediately Enforce CPRA Regulations.

Foley & Lardner LLP on 2/16/2024

On February 9, a California appellate court issued a decisive ruling in favor of the California Privacy Protection Agency (the Agency), allowing the state to immediately begin enforcement of its new regulations, effectively...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

CPPA Proposes More Revisions to CCPA

Robinson+Cole Data Privacy + Security Insider on 12/27/2023

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

CPPA Votes in Favor of Web Browser

Robinson+Cole Data Privacy + Security Insider on 12/22/2023

Last week, the California Privacy Protection Agency (CPPA) voted in favor of a legislative proposal that would require web browsers to include a feature that allows web users the ability to exercise their privacy rights under...more

Automated Decisionmaking Technology in California: New Rules Would Impose Transparency, Notice, and Consumer Opt-Out Obligations...

Davis Wright Tremaine LLP on 12/8/2023

On November 27, 2023, the California Privacy Protection Agency (CPPA) released draft regulations mandating notice, opt-out, and information access requirements for companies using automated decision-making technology (ADMT)...more

CPPA publishes new draft regulations addressing AI, risk assessments, cyber audits

Ballard Spahr LLP on 9/8/2023

The California Privacy Protection Agency (CPPA) recently published two new sets of draft regulations addressing a range of cutting-edge data protection issues. Although the CPPA has not officially started the formal...more

CPPA Publishes New Draft Regulations Addressing AI, Risk Assessments, and Cyber Audits

Ballard Spahr LLP on 9/6/2023

The California Privacy Protection Agency (CPPA) recently published two new sets of draft regulations addressing a range of cutting-edge data protection issues. Although the Agency has not officially started the formal...more

Enforcement of CPRA Regulations Delayed

Farella Braun + Martel LLP on 7/21/2023

Shortly before the California Privacy Right Act (CPRA) modifications to the California Consumer Privacy Act (CCPA) were set to become enforceable on July 1, 2023, a Sacramento Superior Court judge issued a ruling on June 30,...more

California AG Announces CCPA Investigative Sweep

Womble Bond Dickinson on 2/7/2023

In advance of International Data Privacy Day, California Attorney General Rob Bonta announced on January 27, 2023, that his office had initiated an “investigative sweep” of businesses that may not be complying with the...more

Businesses Struggle to Comply with CPRA without Final Regulations

Robinson+Cole Data Privacy + Security Insider on 11/10/2022

As companies hustle to follow the new California Privacy Rights Act (CPRA) regulations, they’ve hit a substantial hiccup: there aren’t any yet. The California Privacy Rights Agency (CPPA), the newly- created body with...more

A New Day for Data Privacy: California Privacy Act Exemptions Will Expire

Woods Rogers on 9/14/2022

January 1, 2023, is now a more ominous deadline in the data privacy compliance world. Privacy professionals have been watching California’s 2022 legislative session to see whether California Consumer Privacy Act (CCPA)...more

California Privacy Protection Agency to Start Formal CPRA Rulemaking Process

Jenner & Block on 6/10/2022

On June 8, 2022, the California Privacy Protection Agency (“CPPA” or “Agency”) voted to begin the formal rulemaking process for regulations implementing the California Privacy Rights Act (CPRA). The Agency Board discussed and...more

Data Privacy + Cybersecurity Insider - March 2021

Robinson & Cole LLP on 3/12/2021

CYBERSECURITY - Microsoft Releases Additional Resources for Exchange Flaws and CISA Issues Alert - As we alerted our readers last week, Microsoft announced that its Exchange email servers have been compromised, which is...more

Virginia Set to Enact Broad Data Privacy Law, Second in US After California: What It Means for Businesses

Morgan Lewis on 2/19/2021

Virginia is on track to become the second state in the United States to pass a comprehensive data privacy law after the Virginia Consumer Data Protection Act (CDPA) quickly passed both houses of Virginia’s state legislature...more

A Year Later: CCPA Compliance Reminder to Review Your Privacy Policy

Bradley Arant Boult Cummings LLP on 1/14/2021

Has it been a year already? Many businesses diligently made sure they did their best to hit the moving CCPA target as they welcomed 2020 and the effective date of the statute last year. A year ago, all we had were draft...more

California Attorney General Proposes Fourth Set of CCPA Regulation Changes

Morgan Lewis on 12/21/2020

The California attorney general released a fourth set of proposed modifications to the California Consumer Privacy Act regulations; notable regulatory changes include a new opt-out button for websites and an offline notice of...more

California Consumer Privacy Act (CCPA) › Regulatory Agenda › Cybersecurity

"My best business intelligence, in one easy email…"