News & Analysis as of

California Consumer Privacy Act (CCPA) › Risk Assessment › State Privacy Laws

The California Consumer Privact Act (CCPA), effective January 1, 2020, enhances privacy rights and consumer protections of California residents. Follow this channel for latest guidance and updates on the CCPA,... more +
The California Consumer Privact Act (CCPA), effective January 1, 2020, enhances privacy rights and consumer protections of California residents. Follow this channel for latest guidance and updates on the CCPA, including implications for business conducting business in California.  less -
Goodwin

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Orrick, Herrington & Sutcliffe LLP

HealthTech Due Diligence: Key Privacy/Security Factors

Orrick, Herrington & Sutcliffe LLP on

Join Thora Johnson and Jeremy Sherer to learn about: Evaluating compliance through privacy notices Key questions to address, from leadership accountability to employee training...more

Katten Muchin Rosenman LLP

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

Katten Muchin Rosenman LLP on

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

Sheppard Mullin Richter & Hampton LLP

California Regulator Releases Updated Draft Regulations, Scales Back Proposed AI Privacy Rules

Sheppard Mullin Richter & Hampton LLP on

California appears to be changing its approach to how it regulates artificial intelligence, likely reflecting its reaction to challenges seen recently in other states. Namely, the California Privacy Protection Agency recently...more

Davis Wright Tremaine LLP

California Privacy Regulator Approves Trimmed-Down Regulations

Davis Wright Tremaine LLP on

On May 1, the California Privacy Protection Agency ("CPPA") board (the "Board") met to discuss revisions to proposed regulations relating to cybersecurity audits, risk assessments, and automated decision-making technologies...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Risk Assessment Edition: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on

In the third in our series of new CCPA regulations from California, we look at obligations for conducting risk assessments under CCPA. CCPA had called on the California agency to promulgate rules to address such assessments,...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Automated Decisionmaking Edition: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on

In the second in our series of new CCPA regulations from California, we look at proposed rules for use of automated decisionmaking technology. As a reminder, CCPA discusses these technologies in relation to profiling, namely...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

More Proposed Regulations from California: What Do These Mean for Your Business?

Hinshaw & Culbertson - Privacy, Cyber & AI... on

What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more

Woods Rogers

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

Husch Blackwell LLP

CPPA Publishes Draft Automated Decisionmaking Technology (AI) Regulations

Husch Blackwell LLP on

Keypoint: The California Privacy Protection Agency continued its rulemaking efforts by releasing draft automated decisionmaking technology regulations although the Agency has yet to initiate the formal rulemaking process....more

Wyrick Robbins Yates & Ponton LLP

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

Sheppard Mullin Richter & Hampton LLP

Impact of the Last Minute CCPA-Enforcement Delay

Sheppard Mullin Richter & Hampton LLP on

A California court recently issued a ruling delaying the CPPA’s ability to enforce the most recent CCPA regulations until March 29, 2024. This does not delay enforcement of the CCPA statute or existing regulations....more

WilmerHale

California State Court Delays Enforcement of CPRA Regulations

WilmerHale on

On June 30, the Sacramento County Superior Court issued a ruling that will delay enforcement of regulations issued pursuant to the California Privacy Rights Act (CPRA) to March 29, 2024. These regulations were originally...more

Constangy, Brooks, Smith & Prophete, LLP

California court delays enforcement of CCPA/CPRA regs until March 2024

Constangy, Brooks, Smith & Prophete, LLP on

On Friday, the Sacramento Superior Court issued a ruling delaying the enforcement of recently enacted California Privacy Rights Act regulations until March 2024. The CPRA, which amended the California Consumer Privacy Act,...more

ArentFox Schiff

Develop a Process to Create Privacy Impact Assessments Under the Attorney-Client Privilege

ArentFox Schiff on

Data protection assessments are required for high-risk processing activities in a rapidly growing set of federal, state, and international comprehensive privacy laws. These assessments are triggered by processing activities,...more

Fisher Phillips

New California Privacy Regulations Leave 4 Key Questions Unanswered for Employers

Fisher Phillips on

More than two years after California voters passed a law amending the state’s landmark privacy rights statute, new regulations implementing the law finally took effect last week – but unfortunately leave four key questions...more

Paul Hastings LLP

New Comprehensive US State Privacy Laws Are Coming – Is Your Company Ready?

Paul Hastings LLP on

Over the last two years, many states have taken cues from California and the EU by adopting sweeping privacy laws. These laws, passed in Virginia, Colorado, Connecticut and Utah, as well as updates to the already enacted...more

Jackson Lewis P.C.

Connecticut Likely to Become Fifth State to Enact Comprehensive Consumer Privacy Law

Jackson Lewis P.C. on

When the California Consumer Privacy Act of 2018 (CCPA) became law, it was only a matter of time before other states adopted their own statutes intending to enhance privacy rights and consumer protection for their residents. ...more

18 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide