News & Analysis as of

Regulatory Requirements California Consumer Privacy Act (CCPA)

Osano

DSAR Response Letter: How to Respond to a Subject Rights Request

Osano on

If you’re not accustomed to handling data subject access requests (DSARs), then it’s understandable if you feel a bit nervous about responding. After all, there are all sorts of legal requirements involved and the potential...more

McNees Wallace & Nurick LLC

Following California’s Lead: How the CCPA’s New Rule Guides Compliance Efforts Nationwide

When it comes to data privacy and cybersecurity regulation in the United States, California continues to lead the way. The state’s latest updates to the California Consumer Privacy Act (CCPA) show that its rules do more than...more

Osano

Optimizing Privacy Operations: Making Compliance Less of a Fire Drill

Osano on

With so much data flying around, it’s more essential than ever that personal information remain private. To help make sure of this, there are a growing number of regulations aimed at personal data protection—like the GDPR and...more

Thomas Fox - Compliance Evangelist

AI Today in 5: August 12, 2025, The Creating Billionaires Episode

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In...more

CDF Labor Law LLP

CCPA Finalizes AI Regulations For Automated Decision-Making Technology

CDF Labor Law LLP on

As artificial intelligence (AI) continues to transform industries, businesses are increasingly integrating AI tools into their workforce operations. In response, California regulators have been actively working to address the...more

Perkins Coie

CPPA Approves Cybersecurity, Automated Decisionmaking, and Risk Assessment Regulations

Perkins Coie on

After years of drafting, discussions, and debates, the California Privacy Protection Agency (CPPA) Board reached a significant milestone in its efforts to bring to fruition regulations that have been in discussion by the CPPA...more

Robinson+Cole Data Privacy + Security Insider

New Updates to CCPA Regulations: California’s Focus on Automated Decisionmaking Technology, Cybersecurity Audits, Risk...

On July 24, 2025, during a public meeting following public comment, the California Privacy Protection Agency (CPPA) Board unanimously approved amendments to the California Consumer Privacy Act (CCPA). These substantial...more

Fox Rothschild LLP

To Do: Annually Review Privacy Notices or Risk CPPA Enforcement

Fox Rothschild LLP on

The annual review and update (if necessary) of privacy notices just got an upgrade to a “must do.” This provision, found in California Consumer Privacy Act from the beginning, requires companies to assess their data...more

Herbert Smith Freehills Kramer

Independent Cybersecurity Audits Will Be Required for ‘Significant Risk’ Under CCPA

The California Privacy Protection Agency (CPPA) has unanimously adopted new regulations requiring certain businesses subject to the California Consumer Privacy Act (CCPA) to conduct annual audits of their cybersecurity...more

Troutman Pepper Locke

Analyzing the New CCPA Regulations

Troutman Pepper Locke on

At its July 24 board meeting, the California Privacy Protection Agency Board authorized agency staff to finalize regulations on automated decision-making technology, risk assessments, cybersecurity audits, insurance, and...more

Wyrick Robbins Yates & Ponton LLP

California’s New CCPA Cybersecurity Audit Regulations: A Roadmap to “Reasonable” Security?

Last week, the California Privacy Protection Agency (“Agency”) approved adoption of detailed new regulations under the CCPA that will include (among other notable components) a rule requiring annual cybersecurity audits for...more

Eversheds Sutherland (US) LLP

The CCPA’s automated decisionmaking tool rules: New consumer rights and compliance challenges

On July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously adopted a comprehensive rulemaking package under the California Consumer Privacy Act (CCPA) that primarily addresses automated decisionmaking...more

Alston & Bird

CPPA Board Votes to Adopt CCPA Regulations; Open DROP Rules to Public Comment

Alston & Bird on

On July 24, 2025, the California Privacy Protection Agency (“CPPA”) Board voted to adopt draft regulations under the California Consumer Privacy Act (“CCPA”) concerning cybersecurity audits, risk assessments, automated...more

Shook, Hardy & Bacon L.L.P.

California Adopts Regulations on Cybersecurity Audits

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

Seyfarth Shaw LLP

California Privacy Protection Agency (CPPA) Finally Voted to Adopt Much Debated Update to CCPA Regulations: What Your Business...

Seyfarth Shaw LLP on

On July 24, 2025, the California Privacy Protection Agency (“CPPA”) unanimously voted to adopt a package of Proposed Regulations for the California Consumer Privacy Act (“CCPA”), marking a significant development in...more

Katten Muchin Rosenman LLP

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

Wiley Rein LLP

Wiley Consumer Protection Download (July 15, 2025)

Wiley Rein LLP on

FTC Sends Warning Letters Regarding Potential Noncompliance With “Made in USA” Requirements. On July 8, the FTC sent letters to a flagpole retailer, footwear maker, football equipment company, and personal care products...more

Jackson Lewis P.C.

CCPA Compliance Reminder: Annual Update Requirement for Online Privacy Policies

Jackson Lewis P.C. on

For businesses subject to the California Consumer Privacy Act (CCPA), a compliance step often overlooked is the requirement to annually update the businesses online privacy policy. Under Cal. Civ. Code § 1798.130(a)(5),...more

King & Spalding

CPPA Revises Draft Rules on Automated Decisionmaking Technology, Cybersecurity Audits, and Risk Assessments

King & Spalding on

On May 1, 2025, the California Privacy Protection Agency (CPPA) released a revised draft of its regulations. These modifications, issued in response to public comments on earlier drafts, aim to clarify and simplify key...more

Baker Botts L.L.P.

U.S. States Unite to Strengthen Privacy Enforcement

Baker Botts L.L.P. on

On April 16, 2025, a coalition of state attorneys general and privacy regulators from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, Oregon, and the California Privacy Protection Agency (CPPA) announced the...more

Haight Brown & Bonesteel LLP

California’s Telephone Consumer Protection Act Compendium

Does your state have its own version of the TCPA? Yes. California has what is known as the California Consumer Privacy Act of 2018, which is located in sections 1798.100 to 1798.199.100 of the California Civil Code. The...more

Orrick, Herrington & Sutcliffe LLP

California privacy agency opens comment period on regulations

On May 9, the California Privacy Protection Agency (CPPA) announced it opened the formal public comment period for its proposed regulations concerning updates to the California Consumer Privacy Act. The proposed rules would...more

McDermott Will & Schulte

Unpacking the Latest Proposed CCPA Regulations

On May 1, 2025, the California Privacy Protection Agency (CPPA) announced a major overhaul of its draft California Consumer Privacy Act (CCPA) regulations on automated decision-making, cybersecurity audits, risk assessments,...more

Seyfarth Shaw LLP

CPPA Underscores That Businesses Own CCPA Compliance – Even When Privacy Management Tools Fail

Seyfarth Shaw LLP on

The California Privacy Protection Agency (“CPPA”) has made it abundantly clear: privacy compliance isn’t just about publishing the right disclosures – it’s about whether your systems actually work. On May 6, the agency fined...more

Perkins Coie

Buckle Up! CPPA Is Driving Privacy Regulation and Enforcement Forward

Perkins Coie on

After a relatively slow start to 2025, the California Privacy Protection Agency (CPPA) is firing on all cylinders now. In recent weeks, the CPPA (i) revised the proposed Delete Request and Opt-out Platform (DROP) regulations...more

116 Results
 / 
View per page
Page: of 5

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide