News & Analysis as of

Cybersecurity › California › California Privacy Protection Agency (CPPA)

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +
Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now.   less -
Foley Hoag LLP - Security, Privacy and the...

California Finalizes New CCPA Regulations: What Businesses Need to Know

Foley Hoag LLP - Security, Privacy and the... on

California continues to lead the way in data privacy standards as the latest regulatory updates from the California Privacy Protection Agency (“CPPA”) mark a significant step forward in safeguarding individual rights and data...more

Sheppard Mullin Richter & Hampton LLP

California Finalizes New CCPA Rules on ADMT, Cybersecurity Audits, and Risk Assessments

Sheppard Mullin Richter & Hampton LLP on

On July 24, the California Privacy Protection Agency (CPPA) approved a major rule package covering automated decision-making technology (ADMT), mandatory cybersecurity audits, and privacy risk assessments under the California...more

Coblentz Patch Duffy & Bass

California Finalizes CCPA Regulations on Automated Decision-Making Technology, Risk Assessments, and Cybersecurity Audits

Coblentz Patch Duffy & Bass on

In July 2025, the California Privacy Protection Agency (CPPA) adopted final regulations governing automated decision-making technology (ADMT), privacy risk assessments, and cybersecurity audits under the California Consumer...more

Blank Rome LLP

California Finalizes CCPA Regulations on Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking: Key Provisions and...

Blank Rome LLP on

The California Privacy Protection Agency (“CPPA”) finalized a set of regulations under the California Consumer Privacy Act (“CCPA”) on July 24, 2025, that address cybersecurity audits, risk assessments, and automated...more

Polsinelli

What You Need to Know About California’s Finalized CCPA Amendments: Part Two

Polsinelli on

On July 24, 2025, the California Privacy Protection Agency (CPPA) approved final regulations (the Rule) under the California Consumer Privacy Act of 2018 (CCPA), introducing new obligations related to automated...more

Fisher Phillips

New California Regs Will Impact Your AI and Privacy Policies: FAQs on Automated Decision-Making, Risk Assessments, and...

Fisher Phillips on

California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more

Nelson Mullins Riley & Scarborough LLP

California Finalizes CCPA Regulation Amendments: New Compliance Obligations for Cybersecurity, Risk Assessments, and Automated...

Nelson Mullins Riley & Scarborough LLP on

On July 24, 2025, the California Privacy Protection Agency (CPPA) Board approved a final package of amendments to the regulations implementing the California Consumer Privacy Act (CCPA). These sweeping changes impose...more

Akin Gump Strauss Hauer & Feld LLP

CPPA Opens Public Comment Period for Proposed AI Regulations

Akin Gump Strauss Hauer & Feld LLP on

The California Privacy Protection Agency (CPPA) announced the formal public comment period for its latest proposed rulemaking package, which includes updates to existing regulations and introduces new guidelines for automated...more

Orrick, Herrington & Sutcliffe LLP

California Privacy Protection Agency increases fines and penalties for 2025

Orrick, Herrington & Sutcliffe LLP on

On December 17, the California Privacy Protection Agency announced increases in fines and penalties under the California Consumer Privacy Act (CCPA), effective January 1, 2025. The agency’s announcement explained the CCPA...more

Littler

Automated Decisionmaking Technology, Risk Assessments, Cybersecurity and More: Implications of the Proposed CCPA Regulations for...

Littler on

On November 22, 2024, the California Privacy Protection Agency (CPPA) formally proposed new regulations implementing the California Consumer Privacy Act (CCPA). Although the CCPA itself and previous CCPA regulations largely...more

Perkins Coie

Fasten Your Seatbelts: CPPA Proposes Rules on Automated Decision-Making and Cybersecurity Audits and Finalizes Data Broker...

Perkins Coie on

After much anticipation, on November 8, the California Privacy Protection Agency (CPPA) Board voted to advance proposed regulations for insurance, cybersecurity audits, risk assessments, and automated decision-making...more

McDermott Will & Schulte

CPPA Opens Public Comment Period for CCPA Regulations

McDermott Will & Schulte on

On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the public comment period for the proposed California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, risk assessments, and...more

Katten Muchin Rosenman LLP

California Regulator Opens Comment Period for Latest Round of Privacy Regulations

Katten Muchin Rosenman LLP on

On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the formal public comment period for its latest proposed rulemaking package. The package includes updates to existing regulations and proposed...more

Proskauer - California Employment Law

California Takes Steps to Regulate the Use of AI for Significant Employment Decisions

Proskauer - California Employment Law on

On November 8, 2024, the California Privacy Protection Agency (CPPA) voted 4-1 to proceed with formal rulemaking regarding automated decision-making technology (“ADMT”), which the draft regulations define as “any technology...more

Cooley LLP

CPPA Adopts Data Broker Registration Regulations, Begins Delete Act Enforcement

Cooley LLP on

On November 9, 2024, the five-person board of the California Privacy Protection Agency (CPPA) voted unanimously to adopt the proposed Data Broker Registration regulations without modifications. The new regulations seek to...more

Kelley Drye & Warren LLP

California Privacy Protection Agency expands the definition of ​“data broker”

Kelley Drye & Warren LLP on

On November 8, the California Privacy Protection Agency (CPPA) voted 5-0 to approve new regulations to implement the DELETE Act of 2023. The most noteworthy development was the agency’s adoption of a new definition of...more

Alston & Bird

CPPA Board Advances CCPA Regulations to Formal Rulemaking; Adopts New Data Broker Regulations

Alston & Bird on

On November 8, 2024, the California Privacy Protection Agency (the “CPPA”) Board advanced to formal rulemaking the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments,...more

Orrick, Herrington & Sutcliffe LLP

California’s privacy agency adopts new data broker regulations

Orrick, Herrington & Sutcliffe LLP on

On November 8, the California Privacy Protection Agency (CPPA) Board voted to adopt new regulations concerning data broker registration requirements and to advance a proposed rulemaking package for insurance, cybersecurity...more

Fox Rothschild LLP

CPPA and Data Brokers: What You Need to Know

Fox Rothschild LLP on

The California Privacy Protection Agency is going after data brokers. The CPPA board voted earlier this month to adopt new regulations regarding data broker registration requirements. If approved, the regulations will...more

Ballard Spahr LLP

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Robinson+Cole Data Privacy + Security Insider

California Privacy Agency to Regulate AI, Boost Cybersecurity Audits

Robinson+Cole Data Privacy + Security Insider on

During the California Privacy Protection Agency’s (CPPA) meeting on November 8, 2024, it voted to proceed with formal rulemaking regarding artificial intelligence (AI) and cybersecurity audits. The CPPA’s rulemaking related...more

Shook, Hardy & Bacon L.L.P.

California Jumps Into Privacy Rulemaking (Again)

Shook, Hardy & Bacon L.L.P. on

The California Privacy Protection Agency (CPPA) is starting formal rulemaking (again) as they move beyond the pre-rulemaking drafts that were debated for a little over a year. During their November 8, 2024, board meeting, the...more

Nelson Mullins Riley & Scarborough LLP

CPPA Board Advances Formal Rulemaking for Automated Decision-Making and Other Key Regulations

Nelson Mullins Riley & Scarborough LLP on

The California Privacy Protection Agency (CPPA) Board has initiated a formal rulemaking process on a new regulatory package, moving forward with proposals for automated decision-making technology (ADMT) rules, cybersecurity...more

Carlton Fields

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

Orrick, Herrington & Sutcliffe LLP

California’s CPPA issues advisory on “dark patterns”

Orrick, Herrington & Sutcliffe LLP on

On September 4, the California Privacy Protection Agency (“CPPA”) issued an enforcement advisory warning businesses against using “dark patterns” in their user interfaces. “Dark patterns” are choices a company makes regarding...more

70 Results
 / 
View per page
Page: of 3
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide