On March 7, 2024, the California Privacy Protection Agency (CPPA) released new materials for review and discussion at the agency’s board meeting on March 8, 2024. Among the materials released were draft risk assessment and automated decision making regulations, updates to existing regulations, and enforcement updates and priorities.

We will be exploring the details of these various updates in coming weeks, and more changes are likely to come before the regulations are finalized. But, companies should take note that the CPPA is moving quickly—and apparently aggressively.

Even before the new regulations are finalized, companies should pay particular attention to the three areas flagged as enforcement priorities: privacy policies and implementing consumer requests. Especially in light of California Attorney General Bonta’s promise of aggressive enforcement without the opportunity to cure, it is safe to assume that these policies will be in the crosshairs. 

[View source.]