News & Analysis as of

Data Protection State Privacy Laws California Privacy Protection Agency (CPPA)

Jackson Lewis P.C.

CCPA Enforcement Action Highlights CPPA Focus on Opt-Out Rights, Website Functionality, and Reliance on Service Providers

Jackson Lewis P.C. on

On May 1, 2025, the California Privacy Protection Agency (CPPA) issued a Final Order in one of its first public enforcement actions under the California Consumer Privacy Act (CCPA), imposing a fine of nearly $350,000 on the...more

Herbert Smith Freehills Kramer

Independent Cybersecurity Audits Will Be Required for ‘Significant Risk’ Under CCPA

The California Privacy Protection Agency (CPPA) has unanimously adopted new regulations requiring certain businesses subject to the California Consumer Privacy Act (CCPA) to conduct annual audits of their cybersecurity...more

Orrick, Herrington & Sutcliffe LLP

CPPA fines data broker for failing to register under the Delete Act

On July 28, the CPPA released a stipulated final order to impose a $55,400 administrative fine on a data broker for failing to register with the agency by the January 31, 2024, deadline as required by California’s Delete Act....more

Goodwin

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Robinson+Cole Data Privacy + Security Insider

California Privacy Protection Agency Remains Committed to Privacy Rights Enforcement

Before assuming his new role as Executive Director for the California Privacy Protection Agency (CPPA), Tom Kemp served as a volunteer policy advisor on the Delete Act in 2023 and California’s 2020 ballot initiative, which...more

Alston & Bird

CPPA Board to Discuss Draft CCPA Regulations, DROP Requirements

Alston & Bird on

The California Privacy Protection Agency (“CPPA”) Board will meet on Thursday, July 24 to discuss the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic...more

Kelley Drye & Warren LLP

California AG focuses on contracts, opt-outs, and consumer disclosures in Healthline settlement

On July 1, 2025, California Attorney General Rob Bonta announced a $1.55 million proposed settlement order with Healthline Media – the largest California Consumer Privacy Act (CCPA) settlement to date. The proposed settlement...more

Falcon Rappaport & Berkman LLP

Navigating the Patchwork of State Consumer Privacy Statutes: An E-Commerce Compliance Playbook

Online retailers now face an increasingly complex matrix of state consumer-privacy statutes that impose prescriptive requirements on data collection, monetization, and cybersecurity practices. ...more

Fox Rothschild LLP

CPPA Executive Director: Increased Enforcement Is Coming

Fox Rothschild LLP on

Businesses should expect to see “increased enforcement” from the California Privacy Protection Agency now that the agency has had four years to staff up and implement rules, the CPPA’s executive director said in an interview...more

Benesch

U.S. State Privacy Regulators Create Consortium as Enforcement Trends Emerge

Benesch on

Trends and areas of focus under U.S. state data protection laws emerge as U.S. states with data protection laws in place increase enforcement actions and coordination....more

Clark Hill PLC

A view from California: Privacy Agency enforcement, CCPA rulemaking and CIPA reform

Clark Hill PLC on

There is never a boring moment in California privacy law, and these past weeks have been no exception. From major modifications to proposed California Consumer Protection Act (CCPA) rulemaking on automated decision-making...more

Baker Botts L.L.P.

Global Data Privacy Collaboration Deepens: CPPA and UK ICO Sign Cooperation Pact

Baker Botts L.L.P. on

In a noteworthy step toward international privacy collaboration, the California Privacy Protection Agency (CPPA) has entered into a formal declaration of cooperation with the U.K. Information Commissioner's Office (ICO). This...more

A&O Shearman

California Privacy Protection Agency publishes first annual report

A&O Shearman on

On February 26 2025, the California Privacy Protection Agency (CPPA) published its first annual report for 2024 (Report). The Report highlights that the CPPA recovered more than USD170,000 of administrative fines for data...more

Clark Hill PLC

Honda Settles With CPPA Over Privacy Violations: Automaker to Change Business Practices and Pay $632,500 Fine

Clark Hill PLC on

In a landmark privacy enforcement action, the California Privacy Protection Agency (CPPA) has reached a settlement with American Honda Motor Co. (“Honda”) following allegations that the automaker violated the CCPA. The...more

Orrick, Herrington & Sutcliffe LLP

California proposes new privacy amendments for data deletion requests

On March 6, the California Privacy Protection Agency (CPPA) proposed amendments to the data broker registration regulations pursuant to the California Delete Act that would introduce new definitions and requirements for data...more

Clark Hill PLC

California Privacy Protection Agency Shuts Down Data Brokerage Through Delete Act Enforcement

Clark Hill PLC on

The California Privacy Protection Agency (“CPPA”) has moved forward with an enforcement action and settlement with two data brokers resulting from its investigative sweep of data broker registration compliance under the...more

Orrick, Herrington & Sutcliffe LLP

California DFPI settles with data broker

On February 27, the California Privacy Protection Agency (CPPA) announced it reached a settlement with a data broker company that failed to register and pay an annual registration fee as required under the Delete Act. The...more

Robinson+Cole Data Privacy + Security Insider

Data Brokers Beware: Another Settlement for Violations of the California Delete Act

The California Privacy Protection Agency (CPPA) and Background Alert, Inc. (a California-based data broker) settled allegations that Background Alert failed to register and pay the annual fee required by the California Delete...more

Cozen O'Connor

California Delete Act Enforcement Sweep

Cozen O'Connor on

Businesses that sell data regarding California residents have been put on notice by the California Privacy Protection Agency’s (the CPPA’s) recent aggressive enforcement of the California Delete Act. On October 30, 2024, the...more

Kelley Drye & Warren LLP

California Privacy Protection Agency Ramps Up Data Broker Oversight

In recent months, the California Privacy Protection Agency (CPPA) has stepped firmly into a role as the nation’s leading data broker regulatory and enforcement agency....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies

The California Privacy Protection Agency board voted on November 8, 2024, to advance a proposed rulemaking package for, among other things, a proposed regulation to clarify the application of the California Consumer Privacy...more

Alston & Bird

The Digital Download – Alston & Bird’s Privacy & Data Security Newsletter – February 2025

Alston & Bird on

Publications & Advisories - January 31, 2025 – Kathleen Benway, Maki DePalo, Jennifer Everett, and Hyun Jai Oh published “Privacy, Cyber & Data Strategy Advisory | FTC Finalizes Amendments to COPPA Rule.”...more

Orrick, Herrington & Sutcliffe LLP

CPPA settles with data broker and flags Jan. 31 deadline

On January 27, the Enforcement Division of the California Privacy Protection Agency (CPPA) settled with a data broker for failing to register and pay an annual fee, pertinent to the California Data Broker Registry under the...more

Orrick, Herrington & Sutcliffe LLP

CPPA extends comment period for regulations to mid-February 2025

On January 16, the California Privacy Protection Agency extended the public comment period for its proposed rulemaking package to February 19 due to wildfires affecting the state....more

White & Case LLP

Data Privacy Update

White & Case LLP on

California Bills, Rulemaking, and Enforcement Update - CPPA automated decision-making technology - On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the formal public comment period on its...more

75 Results
 / 
View per page
Page: of 3

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide