News & Analysis as of

Data Protection Regulatory Requirements California Privacy Protection Agency (CPPA)

Herbert Smith Freehills Kramer

Independent Cybersecurity Audits Will Be Required for ‘Significant Risk’ Under CCPA

The California Privacy Protection Agency (CPPA) has unanimously adopted new regulations requiring certain businesses subject to the California Consumer Privacy Act (CCPA) to conduct annual audits of their cybersecurity...more

Orrick, Herrington & Sutcliffe LLP

CPPA fines data broker for failing to register under the Delete Act

On July 28, the CPPA released a stipulated final order to impose a $55,400 administrative fine on a data broker for failing to register with the agency by the January 31, 2024, deadline as required by California’s Delete Act....more

Troutman Pepper Locke

Analyzing the New CCPA Regulations

Troutman Pepper Locke on

At its July 24 board meeting, the California Privacy Protection Agency Board authorized agency staff to finalize regulations on automated decision-making technology, risk assessments, cybersecurity audits, insurance, and...more

Alston & Bird

CPPA Board to Discuss Draft CCPA Regulations, DROP Requirements

Alston & Bird on

The California Privacy Protection Agency (“CPPA”) Board will meet on Thursday, July 24 to discuss the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic...more

Seyfarth Shaw LLP

CPPA Underscores That Businesses Own CCPA Compliance – Even When Privacy Management Tools Fail

Seyfarth Shaw LLP on

The California Privacy Protection Agency (“CPPA”) has made it abundantly clear: privacy compliance isn’t just about publishing the right disclosures – it’s about whether your systems actually work. On May 6, the agency fined...more

A&O Shearman

California Privacy Protection Agency publishes first annual report

A&O Shearman on

On February 26 2025, the California Privacy Protection Agency (CPPA) published its first annual report for 2024 (Report). The Report highlights that the CPPA recovered more than USD170,000 of administrative fines for data...more

McDermott Will & Schulte

CPPA Puts the Brakes on Honda’s Data Privacy Practices

On March 7, 2025, the California Privacy Protection Agency (CPPA) issued a settlement order imposing a $632,500 fine on American Honda Motor Co., Inc. for violations of the California Consumer Privacy Act (CCPA). The CPPA...more

Orrick, Herrington & Sutcliffe LLP

California DFPI settles with data broker

On February 27, the California Privacy Protection Agency (CPPA) announced it reached a settlement with a data broker company that failed to register and pay an annual registration fee as required under the Delete Act. The...more

Orrick, Herrington & Sutcliffe LLP

CPPA settles with data broker and flags Jan. 31 deadline

On January 27, the Enforcement Division of the California Privacy Protection Agency (CPPA) settled with a data broker for failing to register and pay an annual fee, pertinent to the California Data Broker Registry under the...more

Vorys, Sater, Seymour and Pease LLP

California Expands Requirements for Data Brokers

On November 8, the California Privacy Protection Agency (CPPA), the agency tasked with implementing and enforcing the California Consumer Privacy Act (as amended by the California Privacy Rights Act), unanimously voted to...more

Ballard Spahr LLP

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Shook, Hardy & Bacon L.L.P.

California Jumps Into Privacy Rulemaking (Again)

The California Privacy Protection Agency (CPPA) is starting formal rulemaking (again) as they move beyond the pre-rulemaking drafts that were debated for a little over a year. During their November 8, 2024, board meeting, the...more

Carlton Fields

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

Nossaman LLP

FCC and CPPA Partner to Enhance Consumer Privacy and Data Safeguards

Nossaman LLP on

The Federal Communications Commission’s (FCC) Privacy and Data Protection Task Force announced a Memorandum of Understanding (MOU) with the California Privacy Protection Agency (CPPA). FCC Chairwoman Jessica Rosenworcel...more

Carlton Fields

California Privacy Protection Agency Announces Delete Act Enforcement Sweep

Carlton Fields on

Keeping the season spooky for data brokers, the enforcement division of the California Privacy Protection Agency announced on October 30, 2024, that it is conducting a public investigative sweep of data broker registration...more

White & Case LLP

CPPA Enforcement Division Issues First Enforcement Advisory on Data Minimization

White & Case LLP on

On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more

Sheppard Mullin Richter & Hampton LLP

The CPPA Signals Focus on Data Minimization and Consumer Requests

Earlier this month, the California Privacy Protection Agency (CPPA) issued its first-ever enforcement advisory (No. 2024-01). The advisory addresses what it calls the “foundational principle” of data minimization, and more...more

Nossaman LLP

California Privacy Protection Agency to Begin Enforcement Activities

Nossaman LLP on

After a successful appeal of a June ruling, the California Privacy Protection Agency (CPPA) is authorized to begin immediate enforcement of privacy regulations developed, and expanded, under the California Privacy Rights Act...more

Ballard Spahr LLP

CA Court of Appeals Decision Means CPPA May Start Enforcing CPRA Regulations

Ballard Spahr LLP on

On February 9, 2024, California’s Third District Court of Appeals reinstated the California Privacy Protection Agency’s (“CPPA”) ability to enforce the California Privacy Rights Act of 2020 (“CPRA”) regulations. The CPRA...more

Robinson+Cole Data Privacy + Security Insider

California Privacy Protection Agency Launches New Website with Privacy Rights Resources

Last week, the California Privacy Protection Agency (CPPA) launched a new website dedicated to providing resources to California residents about their privacy rights under the California Consumer Privacy Act (CCPA). The...more

Polsinelli

California’s Amended Data Broker Registration Law

Polsinelli on

In October 2023, California Governor Gavin Newsom signed Senate Bill (S.B.) 362 into law, amending California’s data broker registration law. By January 31, 2024, qualifying data brokers must register with the California...more

Epstein Becker & Green

California Privacy Protection Agency Grapples with Cybersecurity Audit, Risk Assessment, Automated Decisionmaking Technology...

Epstein Becker & Green on

On December 8, 2023, the California Privacy Protection Agency (“CPPA”) Board (the “Board”) held a public meeting to discuss, among other things, regulations addressing: (1) cybersecurity audits; (2) risk assessments; and (3)...more

Robinson+Cole Data Privacy + Security Insider

CPPA Proposes More Revisions to CCPA

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

CDF Labor Law LLP

Modified Privacy Regulations May be on the Horizon

CDF Labor Law LLP on

On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal...more

Jones Day

With the Delete Act, California Enacts Another Groundbreaking Privacy Law

Jones Day on

The Situation: California has enacted a groundbreaking new privacy law aimed at data brokers—entities that sell information about consumers with whom they do not have a direct relationship. Under the Delete Act (SB 362), data...more

30 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide