California Consumer Privacy Act (CCPA), Risk Assessment, Data Protection

US State Risk Assessment and Impact Assessment Requirements

Troutman Pepper Locke on 9/10/2025

The number of instances in which businesses must conduct risk assessments and impact assessments under state privacy and AI laws has exploded. In recent months, California and Connecticut have added additional — and...more

U.S. State Privacy and AI Laws Key Dates (2025)

Troutman Pepper Locke on 9/4/2025

Between consumer data privacy laws, AI laws, data broker laws, and children’s privacy laws, the number of deadlines companies must track has exploded. This includes deadlines that are often buried in laws and regulations,...more

California Finalizes New CCPA Regulations: What Businesses Need to Know

Foley Hoag LLP - Security, Privacy and the... on 8/29/2025

California continues to lead the way in data privacy standards as the latest regulatory updates from the California Privacy Protection Agency (“CPPA”) mark a significant step forward in safeguarding individual rights and data...more

California Finalizes New CCPA Rules on ADMT, Cybersecurity Audits, and Risk Assessments

Sheppard Mullin Richter & Hampton LLP on 8/29/2025

On July 24, the California Privacy Protection Agency (CPPA) approved a major rule package covering automated decision-making technology (ADMT), mandatory cybersecurity audits, and privacy risk assessments under the California...more

CPPA Adopts ADMT, Cybersecurity and Risk Assessment Regulations

Sheppard Mullin Richter & Hampton LLP on 8/26/2025

The CPPA scratched another task off the to-do list last month when it officially adopted proposed regulations under CCPA. These rules focus on three major areas: automated decision-making technology, risk assessments, and...more

State privacy enforcement heats up this summer: What CA, CT settlements mean for your business

Constangy, Brooks, Smith & Prophete, LLP on 8/25/2025

In an era of escalating data breaches, organizations must be vigilant in protecting consumer information. A comprehensive federal data privacy law would streamline compliance efforts, but Congress has yet to pass one, leaving...more

The CPPA Finalizes Rules on ADMT, Risk Assessments, and Cybersecurity Audits

Baker Botts L.L.P. on 8/14/2025

On 24 July 2025, the California Privacy Protection Agency (CPPA) unanimously approved a long-awaited and -debated rulemaking package that addresses: (i) the use of automated decision-making technology, (ii) mandatory risk...more

California Finalizes Groundbreaking Regulations on AI, Risk Assessments, and Cybersecurity, Part II: What Businesses Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 8/8/2025

In July 2025, the California Privacy Protection Agency (CPPA) Board unanimously approved new regulations pursuant to the California Consumer Privacy Act (CCPA) that specifically address the use of automated decisionmaking...more

California Finalizes CCPA Regulations on Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking: Key Provisions and...

Blank Rome LLP on 8/6/2025

The California Privacy Protection Agency (“CPPA”) finalized a set of regulations under the California Consumer Privacy Act (“CCPA”) on July 24, 2025, that address cybersecurity audits, risk assessments, and automated...more

What You Need to Know About California’s Finalized CCPA Amendments: Part Two

Polsinelli on 8/5/2025

On July 24, 2025, the California Privacy Protection Agency (CPPA) approved final regulations (the Rule) under the California Consumer Privacy Act of 2018 (CCPA), introducing new obligations related to automated...more

Analyzing the New CCPA Regulations

Troutman Pepper Locke on 8/4/2025

At its July 24 board meeting, the California Privacy Protection Agency Board authorized agency staff to finalize regulations on automated decision-making technology, risk assessments, cybersecurity audits, insurance, and...more

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on 8/1/2025

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Use of AI in Marketing and Digital Media - 2025 Playbook

BakerHostetler on 1/27/2025

Right now, we are all taking stock of the many important issues and challenges we saw crop up for clients last year, trying to predict what they will face in the coming year, and strategizing about how we can help....more

California Privacy Protection Agency’s Regulations on Automated Decision-Making Technology, Risk Assessments Delayed

Robinson+Cole Data Privacy + Security Insider on 3/22/2024

The California Privacy Protection Agency’s (CPPA) highly anticipated regulations for automated decision-making technology and risk assessment requirements are likely far from final. The CPPA met at the beginning of the month...more

California Privacy Protection Agency Board Votes to Advance Proposed Regulations to Formal Rulemaking

Alston & Bird on 3/14/2024

On March 8, 2024, the California Privacy Protection Agency (“CPPA”) Board voted to advance to formal rulemaking proposed regulations under the California Consumer Privacy Act, as amended, regarding risk assessments, automated...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

California Eyes New Privacy, Cyber, and AI Obligations

Wiley Rein LLP on 9/14/2023

California continues to forge ahead on potential new privacy, cybersecurity, and artificial intelligence (AI) obligations, including through its California Consumer Privacy Act (CCPA) rulemaking process and by launching a new...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

California Consumer Privacy Act (CCPA) › Risk Assessment › Data Protection