California Consumer Privacy Act (CCPA), Risk Assessment, Cybersecurity

CPPA Board Grapples with Public Concerns: Key Updates on Upcoming AI, Risk Assessment, and Cybersecurity Regulations

Wilson Sonsini Goodrich & Rosati on 4/17/2025

On April 4, 2025, the California Privacy Protection Agency (CPPA) Board met to discuss the latest draft California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, risk assessments, automated...more

CPPA Releases Updates to Proposed CCPA Regulations

McDermott Will & Emery on 3/28/2025

In advance of its April 4, 2025, board meeting, the California Privacy Protection Agency (CPPA) released a discussion draft of revisions to its proposed California Consumer Privacy Act (CCPA) regulations. These revisions...more

The Intersection of Agentic AI and Emerging Legal Frameworks

Foley & Lardner LLP on 12/20/2024

The evolution of artificial intelligence (AI) has introduced systems capable of making autonomous decisions, known as agentic AI. While generative AI essentially “creates” – providing content such as text, images, etc. –...more

CPPA Board Advances CCPA Regulations to Formal Rulemaking; Adopts New Data Broker Regulations

Alston & Bird on 11/18/2024

On November 8, 2024, the California Privacy Protection Agency (the “CPPA”) Board advanced to formal rulemaking the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments,...more

California Privacy Protection Agency Advances Rulemaking on AI and Cybersecurity Audits

Jackson Lewis P.C. on 11/13/2024

On November 8, 2024, the California Privacy Protection Agency (CPPA) voted to proceed with formal rulemaking regarding artificial intelligence (AI) and cybersecurity audits. This comes on the heels of the California Civil...more

CPPA Board Advances Formal Rulemaking for Automated Decision-Making and Other Key Regulations

Nelson Mullins Riley & Scarborough LLP on 11/12/2024

The California Privacy Protection Agency (CPPA) Board has initiated a formal rulemaking process on a new regulatory package, moving forward with proposals for automated decision-making technology (ADMT) rules, cybersecurity...more

CPPA Declines to Advance New Draft CCPA Regulations

Paul Hastings LLP on 7/30/2024

The California Privacy Protection Agency (CPPA) Board met last week to discuss the latest updates on California Consumer Privacy Act (CCPA) draft regulations for cybersecurity audits, risk assessments, automated...more

More Proposed Regulations from California: What Do These Mean for Your Business?

Hinshaw & Culbertson - Privacy, Cyber & AI... on 7/30/2024

What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more

Draft CCPA Regulations Stalled as Agency Struggles With Applicability of ADMT Rules

McDermott Will & Emery on 7/23/2024

On July 15, 2024, the California Privacy Protection Agency (CPPA) released proposed updates to the California Consumer Privacy Act (CCPA) regulations, including updates to the draft risk assessments, automated decisionmaking...more

CPPA Board Declines to Advance CCPA Regulations to Formal Rulemaking; CPPA Highlights Enforcement Priorities

Alston & Bird on 7/22/2024

On July 16, 2024, the California Privacy Protection Agency (the “CPPA”) board declined to advance to formal rulemaking California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments,...more

Nuanced Privacy Laws Means Healthcare Organizations Should Prioritize Protecting Personal Information

Jackson Lewis P.C. on 4/29/2024

The healthcare industry is among the most highly regulated industries when it comes to privacy protections. In addition to the federal Health Insurance Portability and Accountability Act (HIPAA), healthcare providers also...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

California Advancing Regulations for AI, Other Cybersecurity Issues

Procopio, Cory, Hargreaves & Savitch LLP on 1/3/2024

California continues to push beyond other states in developing and implementing privacy and cybersecurity regulations. The latest evidence came from the recent release of draft regulations from the California Privacy...more

Updates to CCPA Proposed Regulations: Cybersecurity Audits

Mintz - Privacy & Cybersecurity Viewpoints on 12/15/2023

The California Privacy Protection Agency (“CPPA”) published a revised set of Draft Cybersecurity Audit Regulations ahead of the CPPA Board’s December 8, 2023 meeting. When the CPPA Board met on December 8, several key...more

New Cyber, Privacy and Automated Decisionmaking Rules Coming Soon to California

McDermott Will & Emery on 12/13/2023

Substantial changes to the California Consumer Privacy Act (CCPA) are coming soon through five sets of proposed regulations governing (1) cybersecurity audits, (2) privacy risk assessments, (3) artificial...more

CPPA Publishes Additional Proposed Regulations - Including Proposed Revisions to CCPA Regulations - For Discussion at December...

WilmerHale on 12/7/2023

In the run-up to this Friday’s December Board meeting, the California Privacy Protection Agency (CPPA or the “Agency”) has continued its recent flurry of regulatory activity. Late last week, the CPPA published an additional...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

California Privacy Protection Agency Publishes New Draft CPRA Cybersecurity and Automated Decisionmaking Regulations in Advance of...

WilmerHale on 12/1/2023

In advance of the California Privacy Protection Agency’s (CPPA) December 8 Board meeting, the Agency has published new draft automated decisionmaking technology (ADMT) regulations, as well as revisions to draft regulations on...more

Importance of Protecting Employee Information as Privacy and Cybersecurity Laws Proliferate

Jackson Lewis P.C. on 10/3/2023

Most human resources professionals are concerned about the privacy and security of the vast amounts of personal information they manage. This article discusses steps to consider taking against the challenges. Deluge of...more

California Privacy Protection Agency Publishes Draft Cybersecurity Audit and Risk Assessment Regulations, Discusses at Public...

WilmerHale on 9/19/2023

On Friday, September 8, the California Privacy Protection Agency (CPPA) held a public board meeting. The primary topic of discussion at this meeting was the Agency’s draft regulations on cybersecurity audits and risk...more

California Eyes New Privacy, Cyber, and AI Obligations

Wiley Rein LLP on 9/14/2023

California continues to forge ahead on potential new privacy, cybersecurity, and artificial intelligence (AI) obligations, including through its California Consumer Privacy Act (CCPA) rulemaking process and by launching a new...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

California Consumer Privacy Act (CCPA) › Risk Assessment › Cybersecurity