California Consumer Privacy Act (CCPA), Regulatory Requirements

CPPA Enforcement Division Issues First Enforcement Advisory on Data Minimization

White & Case LLP on 5/9/2024

On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more

CPPA’s First Enforcement Advisory Focuses on Applying Data Minimization Principles to Consumer Requests

Skadden, Arps, Slate, Meagher & Flom LLP on 4/19/2024

On April 2, 2024, the Enforcement Division of the California Privacy Protection Agency (CPPA) issued Enforcement Advisory No. 2024-01. This first-ever enforcement advisory focuses on promoting compliance with California...more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

California Appellate Court Empowers Privacy Agency to Immediately Enforce CPRA Regulations.

Foley & Lardner LLP on 2/16/2024

On February 9, a California appellate court issued a decisive ruling in favor of the California Privacy Protection Agency (the Agency), allowing the state to immediately begin enforcement of its new regulations, effectively...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

Data Privacy & Cybersecurity - US Data Privacy Law Compliance Checklist - September 2023

White & Case LLP on 2/7/2024

The effective dates of new U.S. data privacy laws are closing in. Currently, thirteen states have passed comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana,...more

California Privacy Protection Agency Launches New Website with Privacy Rights Resources

Robinson+Cole Data Privacy + Security Insider on 1/26/2024

Last week, the California Privacy Protection Agency (CPPA) launched a new website dedicated to providing resources to California residents about their privacy rights under the California Consumer Privacy Act (CCPA). The...more

California’s Amended Data Broker Registration Law

Polsinelli on 1/18/2024

In October 2023, California Governor Gavin Newsom signed Senate Bill (S.B.) 362 into law, amending California’s data broker registration law. By January 31, 2024, qualifying data brokers must register with the California...more

2024 Privacy Law Preview

WilmerHale on 1/17/2024

As we have detailed previously, 2023 was a landmark year for privacy law, featuring numerous developments at the federal, state and international levels, ranging from newly enacted statutes to massive regulatory enforcement...more

California Privacy Protection Agency Grapples with Cybersecurity Audit, Risk Assessment, Automated Decisionmaking Technology...

Epstein Becker & Green on 12/27/2023

On December 8, 2023, the California Privacy Protection Agency (“CPPA”) Board (the “Board”) held a public meeting to discuss, among other things, regulations addressing: (1) cybersecurity audits; (2) risk assessments; and (3)...more

CPPA Proposes More Revisions to CCPA

Robinson+Cole Data Privacy + Security Insider on 12/27/2023

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

Modified Privacy Regulations May be on the Horizon

CDF Labor Law LLP on 12/7/2023

On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal...more

The California “Delete Act” Becomes Law

Bradley Arant Boult Cummings LLP on 10/24/2023

On October 10, 2023, California Gov. Gavin Newsom signed SB 362 into law. The “Delete Act” is a key piece of privacy legislation designed to further protect consumer online privacy rights and place further obligations on data...more

California Privacy Protection Agency Public Board Meeting Sheds Light on Upcoming Risk Assessment and Cybersecurity Audit...

Epstein Becker & Green on 9/13/2023

The five-member Board of the California Privacy Protection Agency (the “CPPA”) held a public meeting on September 8, 2023, to discuss a range of topics, most notably, draft regulations relating to risk assessments and...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

The California Attorney General Investigates CA Employers’ CCPA Compliance

Fenwick & West LLP on 7/24/2023

On July 14, 2023, California Attorney General Rob Bonta announced an “investigative sweep” through inquiry letters sent to large California employers. The sweep seeks information on companies’ compliance with the California...more

Brush Up On Your Opt-Outs: Calif. AG Signals Mobile App Investigative Sweep

Sheppard Mullin Richter & Hampton LLP on 2/10/2023

California Attorney General Rob Bonta recently announced a new privacy investigative sweep. The AG is sending letters to businesses with mobile apps that have failed to follow the California Consumer Privacy Act (CCPA)....more

Are You Ready For 2023's New Data Privacy Laws?

Lathrop GPM on 1/5/2023

California continues to serve as the primary driver of privacy law in the United States, but other state laws now warrant compliance. The California Privacy Rights Act (CPRA), effective January 1, 2023, amends and extends the...more

Businesses Struggle to Comply with CPRA without Final Regulations

Robinson+Cole Data Privacy + Security Insider on 11/10/2022

As companies hustle to follow the new California Privacy Rights Act (CPRA) regulations, they’ve hit a substantial hiccup: there aren’t any yet. The California Privacy Rights Agency (CPPA), the newly- created body with...more

Are You Ready? The California Privacy Rights Act Could now Apply to Your Business

Robinson+Cole Data Privacy + Security Insider on 11/4/2022

California law will soon require businesses to treat their employees and business partners as consumers under the California Consumer Privacy Act (CCPA). The CCPA and its successor legislation, the California Privacy Rights...more

Minor Keys: Major Takeaways from New California Online Children’s Privacy Law

Wyrick Robbins Yates & Ponton LLP on 11/2/2022

The California Age-Appropriate Design Code Act (the “Act”) recently became law and includes a number of online privacy-related requirements related to individuals under the age of 18. The statute is similar to, and expressly...more

CPRA and Employee Data – What Businesses Need to Know

Polsinelli on 8/31/2022

The California Privacy Rights Act (“CPRA”) comes into force on January 1, 2023, and will amend and extend the privacy rights under the California Consumer Privacy Act (“CCPA”). Assuming no further applicable extensions or...more

Navigating the Financial Incentive Requirement of the California Consumer Privacy Act

Stradling Yocca Carlson & Rauth on 4/8/2022

Since its enactment at the beginning of 2020, the California Consumer Privacy Act (CCPA) has garnered a significant amount of attention. The watershed legislation, which is intended to strengthen privacy rights in the state...more

California Privacy Rights Act for Employers: The New “Notice at Collection” California Employers Must Distribute to the Workforce

Littler on 1/26/2022

This is the third in a series of articles about the implications of the California Privacy Rights Act for employers. - On January 1, 2023, the California Privacy Rights Act (CPRA) will go into effect and California...more

6 Steps to Implementing an Effective Corporate Compliance Strategy

Reveal on 1/14/2022

It’s no secret that compliance is a huge part of a corporate lawyer’s job. Whether it’s internal or external compliance, there’s a lot that needs to be done to keep a business operating smoothly and on the right side of the...more

California Consumer Privacy Act (CCPA) › Regulatory Requirements

"My best business intelligence, in one easy email…"