California Consumer Privacy Act (CCPA), Data Management

No Money, Mo’ Problems: DoorDash CCPA Enforcement Action Emphasizes Personal Information “Sales” Aren’t All About the Benjamins

Wyrick Robbins Yates & Ponton LLP on 3/13/2024

The California Attorney General (“AG”) recently delivered (pun very much intended) a public CCPA enforcement action against DoorDash, its second following the 2022 settlement with Sephora. The DoorDash action stems from a...more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

California Privacy Protection Agency Launches New Website with Privacy Rights Resources

Robinson+Cole Data Privacy + Security Insider on 1/26/2024

Last week, the California Privacy Protection Agency (CPPA) launched a new website dedicated to providing resources to California residents about their privacy rights under the California Consumer Privacy Act (CCPA). The...more

Prepare for the CPRA by improving your business’s data management

Onna Technologies, Inc. on 1/17/2024

On March 29, 2024, the California Privacy Protection Agency (CPPA) can begin enforcing regulations under the California Privacy Rights Act (CPRA), ushering in a new era of data privacy requirements for businesses....more

California Privacy Protection Agency Grapples with Cybersecurity Audit, Risk Assessment, Automated Decisionmaking Technology...

Epstein Becker & Green on 12/27/2023

On December 8, 2023, the California Privacy Protection Agency (“CPPA”) Board (the “Board”) held a public meeting to discuss, among other things, regulations addressing: (1) cybersecurity audits; (2) risk assessments; and (3)...more

CPPA Proposes More Revisions to CCPA

Robinson+Cole Data Privacy + Security Insider on 12/27/2023

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

Annual Updates to Privacy Policies Reminder and Looking Ahead to 2024

Wiley Rein LLP on 12/14/2023

The end of the year is a good time to revisit your organization’s privacy policy to ensure it is accurate and up to date. Notably, at least one state privacy law – the California Consumer Privacy Act (CCPA) – requires that a...more

Modified Privacy Regulations May be on the Horizon

CDF Labor Law LLP on 12/7/2023

On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal...more

How better data management leads to better data compliance

Onna Technologies, Inc. on 11/2/2023

Data is a double-edged sword. It’s a valuable business asset, offering crucial insights into market trends, consumer behavior, and operational efficiency. In short, data helps companies make informed decisions, drive...more

California Enacts One-Stop Mechanism for Data Broker Deletion Requests

Wilson Sonsini Goodrich & Rosati on 10/26/2023

California residents may soon be able to click “backspace” on data brokers doing business in the state. On October 10, 2023, California Governor Gavin Newsom signed Senate Bill 362, colloquially known as the Delete Act, into...more

Cracks in the State Privacy Law Foundation: State Privacy Law Challenges See Success in District and State Courts

Wiley Rein LLP on 10/6/2023

A recent spate of successful legal challenges has provided some relief from the ever-swelling wave of state privacy laws. The legal bases of these challenges vary, but taken together, they highlight that state privacy laws –...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

AI and Audits: Proposed CCPA Regulations Up for Discussion

Robinson+Cole Data Privacy + Security Insider on 9/8/2023

On September 8, 2023, the California Privacy Protection Agency (CPPA) will discuss the two new sets of proposed California Privacy Protection Act (CCPA) regulations. Here is a breakdown of the two new proposed regulations and...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

DIFC Issues Landmark Adequacy Decision Regarding the California Consumer Privacy Act

Akin Gump Strauss Hauer & Feld LLP on 8/18/2023

On August 7, 2023, the Commissioner of Data Protection of the Dubai International Financial Centre (the DIFC), a financial free-zone in the United Arab Emirates, issued the first adequacy decision regarding the California...more

CPPA Announces Investigation of Connected Vehicle Manufacturers’ Privacy Practices

Robinson+Cole Data Privacy + Security Insider on 8/18/2023

Recently, the California Privacy Protection Agency (CPPA) announced its new initiative in investigating the data privacy practices of connected vehicle (CV) manufacturers and the related technologies. Generally, the CPPA will...more

The best data retention policy template to get you started (Updated)

Onna Technologies, Inc. on 8/14/2023

Editor’s note: This post was originally published in October 2020 and has been updated for accuracy and comprehensiveness. They say more is better. And that’s true in many cases, but not when we’re talking about a stockpile...more

California Court Checks Enforcement Authority of New Privacy Agency

Akerman LLP on 8/10/2023

Background - Enforcement of the California Privacy Rights Act of 2020 (CPRA) Final Regulations by the California Privacy Protection Agency was put on hold June 30, 2023, by a California Superior Court, just before...more

Investigative Sweep of Employers’ CCPA Compliance by the California Attorney General

Robinson+Cole Data Privacy + Security Insider on 8/4/2023

The California Attorney General recently announced an initiative to investigate employers’ non-compliance with the California Consumer Privacy Act/California Privacy Rights Act (collectively the CCPA)....more

California Privacy Protection Agency Announces CCPA Enforcement Focus

Robinson+Cole Data Privacy + Security Insider on 7/28/2023

A plan for an enforcement program under the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA) (collectively CCPA) is on its way from the California Privacy Protection Agency (CPPA). Despite a recent...more

The California Attorney General and the California Privacy Protection Agency Are Accelerating Enforcement on CCPA/CPRA...

Epstein Becker & Green on 7/27/2023

California businesses, including employers, who have not already complied with their statutory data privacy obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA),...more

California Consumer Privacy Act (CCPA) › Data Management