California Consumer Privacy Act (CCPA), Risk Assessment, Audits

The Intersection of Agentic AI and Emerging Legal Frameworks

Foley & Lardner LLP on 12/20/2024

The evolution of artificial intelligence (AI) has introduced systems capable of making autonomous decisions, known as agentic AI. While generative AI essentially “creates” – providing content such as text, images, etc. –...more

California Privacy Protection Agency Advances Rulemaking on AI and Cybersecurity Audits

Jackson Lewis P.C. on 11/13/2024

On November 8, 2024, the California Privacy Protection Agency (CPPA) voted to proceed with formal rulemaking regarding artificial intelligence (AI) and cybersecurity audits. This comes on the heels of the California Civil...more

California Legislature Sends Bills Regulating AI to the Governor

Davis Wright Tremaine LLP on 9/10/2024

Last week, the California Legislature passed several bills that, if signed by the governor, will regulate how organizations develop, train, and use artificial intelligence (AI) models, systems, and applications. Of these...more

CPPA Declines to Advance New Draft CCPA Regulations

Paul Hastings LLP on 7/30/2024

The California Privacy Protection Agency (CPPA) Board met last week to discuss the latest updates on California Consumer Privacy Act (CCPA) draft regulations for cybersecurity audits, risk assessments, automated...more

Nuanced Privacy Laws Means Healthcare Organizations Should Prioritize Protecting Personal Information

Jackson Lewis P.C. on 4/29/2024

The healthcare industry is among the most highly regulated industries when it comes to privacy protections. In addition to the federal Health Insurance Portability and Accountability Act (HIPAA), healthcare providers also...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

California Advancing Regulations for AI, Other Cybersecurity Issues

Procopio, Cory, Hargreaves & Savitch LLP on 1/3/2024

California continues to push beyond other states in developing and implementing privacy and cybersecurity regulations. The latest evidence came from the recent release of draft regulations from the California Privacy...more

Updates to CCPA Proposed Regulations: Cybersecurity Audits

Mintz - Privacy & Cybersecurity Viewpoints on 12/15/2023

The California Privacy Protection Agency (“CPPA”) published a revised set of Draft Cybersecurity Audit Regulations ahead of the CPPA Board’s December 8, 2023 meeting. When the CPPA Board met on December 8, several key...more

CPPA Publishes Additional Proposed Regulations - Including Proposed Revisions to CCPA Regulations - For Discussion at December...

WilmerHale on 12/7/2023

In the run-up to this Friday’s December Board meeting, the California Privacy Protection Agency (CPPA or the “Agency”) has continued its recent flurry of regulatory activity. Late last week, the CPPA published an additional...more

California Privacy Protection Agency Publishes New Draft CPRA Cybersecurity and Automated Decisionmaking Regulations in Advance of...

WilmerHale on 12/1/2023

In advance of the California Privacy Protection Agency’s (CPPA) December 8 Board meeting, the Agency has published new draft automated decisionmaking technology (ADMT) regulations, as well as revisions to draft regulations on...more

California Privacy Protection Agency Publishes Draft Cybersecurity Audit and Risk Assessment Regulations, Discusses at Public...

WilmerHale on 9/19/2023

On Friday, September 8, the California Privacy Protection Agency (CPPA) held a public board meeting. The primary topic of discussion at this meeting was the Agency’s draft regulations on cybersecurity audits and risk...more

California Eyes New Privacy, Cyber, and AI Obligations

Wiley Rein LLP on 9/14/2023

California continues to forge ahead on potential new privacy, cybersecurity, and artificial intelligence (AI) obligations, including through its California Consumer Privacy Act (CCPA) rulemaking process and by launching a new...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

California Unveils New Draft Requirements for Privacy Risk Assessments, Cybersecurity Audits and AI

BakerHostetler on 9/11/2023

On August 29, 2023, the California Privacy Protection Agency (CPPA) Board unveiled Draft Regulations on Risk Assessment and Cybersecurity Audit. The CPPA Board announced that the formal rulemaking process will begin soon,...more

AI and Audits: Proposed CCPA Regulations Up for Discussion

Robinson+Cole Data Privacy + Security Insider on 9/8/2023

On September 8, 2023, the California Privacy Protection Agency (CPPA) will discuss the two new sets of proposed California Privacy Protection Act (CCPA) regulations. Here is a breakdown of the two new proposed regulations and...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

CPPA Holds Meeting to Discuss Regulations for Automated Decision-Making Technology, Cybersecurity Audits, and Cybersecurity Risk...

WilmerHale on 8/9/2023

On July 14, the California Privacy Protection Agency (CPPA or the “Board”) hosted a meeting to discuss key issues. Notably, the Board’s New CPRA Rules Subcommittee (“the Subcommittee”) previewed three areas of forthcoming...more

California State Court Delays Enforcement of CPRA Regulations

WilmerHale on 7/11/2023

On June 30, the Sacramento County Superior Court issued a ruling that will delay enforcement of regulations issued pursuant to the California Privacy Rights Act (CPRA) to March 29, 2024. These regulations were originally...more

California Superior Court Put the Brakes on Enforcement of California Privacy Rights Act

Jackson Lewis P.C. on 7/7/2023

In March 2023, the California Chamber of Commerce filed a Petition for Writ of Mandate and Complaint for Declaratory and Injunctive Relief against the California Privacy Protection Agency (CPPA), the agency tasked with...more

California court delays enforcement of CCPA/CPRA regs until March 2024

Constangy, Brooks, Smith & Prophete, LLP on 7/5/2023

On Friday, the Sacramento Superior Court issued a ruling delaying the enforcement of recently enacted California Privacy Rights Act regulations until March 2024. The CPRA, which amended the California Consumer Privacy Act,...more

California Privacy Protection Agency Emphasizes Enforcement and Expresses Opposition to Federal Privacy Legislation at March...

WilmerHale on 3/13/2023

On Friday, March 3, 2023, the California Privacy Protection Agency (CPPA) held a public board meeting. Though the meeting focused primarily on the Agency’s budget and various administrative issues (e.g., subcommittee...more

California Consumer Privacy Act (CCPA) › Risk Assessment › Audits

"My best business intelligence, in one easy email…"