News & Analysis as of

Regulatory Requirements State Privacy Laws California Privacy Protection Agency (CPPA)

Baker Botts L.L.P.

U.S. States Unite to Strengthen Privacy Enforcement

Baker Botts L.L.P. on

On April 16, 2025, a coalition of state attorneys general and privacy regulators from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, Oregon, and the California Privacy Protection Agency (CPPA) announced the...more

White & Case LLP

From California to Kentucky: Tracking the Rise of State AI Laws in 2025

White & Case LLP on

As artificial intelligence ("AI") systems and their use continue to advance, the regulatory landscape in the United States is rapidly evolving, but not in a uniform way. Unlike the European Union's comprehensive approach with...more

McDermott Will & Emery

Unpacking the Latest Proposed CCPA Regulations

McDermott Will & Emery on

On May 1, 2025, the California Privacy Protection Agency (CPPA) announced a major overhaul of its draft California Consumer Privacy Act (CCPA) regulations on automated decision-making, cybersecurity audits, risk assessments,...more

Paul Hastings LLP

CPPA Proposes Amendments to Draft Regulations on ADMTs

Paul Hastings LLP on

On May 1, the California Privacy Protection Agency (CPPA) Board held a meeting to discuss proposed amendments to the CPPA draft regulations on cybersecurity audits, risk assessments and automated decision-making technology...more

King & Spalding

Seven States Form Consortium for Privacy Enforcement

King & Spalding on

On April 16, regulators from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, and Oregon announced the creation of the Consortium of Privacy Regulators, a new collaborative effort focused on the...more

Skadden, Arps, Slate, Meagher & Flom LLP

Eight-State Consortium of Privacy Regulators Marks Shift Toward Coordinated Enforcement

In a major development for businesses subject to state data privacy laws, eight state privacy regulators have joined forces to form the “Consortium of Privacy Regulators,” a bipartisan coalition aimed at coordinating...more

Hudson Cook, LLP

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

Top 6 Takeaways for Privacy Compliance Professionals From the IAPP 2025 Global Summit

The International Association of Privacy Professionals (IAPP) once again delivered an outstanding 2025 Global Summit. Hinshaw partners and associates were proud to participate in the event and are pleased to provide our...more

Orrick, Herrington & Sutcliffe LLP

State regulators form consortium to enforce privacy laws

On April 18, the California Privacy Protection Agency (CPPA) announced that eight state regulators have formed the Consortium of Privacy Regulators to enforce privacy laws collaboratively and protect consumers. This...more

Cozen O'Connor

Bipartisan AGs Collaborate on Consumer Privacy

Cozen O'Connor on

A bipartisan coalition of seven AGs and the California Privacy Protection Agency (CPPA) announced the formation of the Consortium of Privacy Regulators, an initiative aimed at enhancing collaboration and information-sharing...more

A&O Shearman

California Privacy Protection Agency publishes first annual report

A&O Shearman on

On February 26 2025, the California Privacy Protection Agency (CPPA) published its first annual report for 2024 (Report). The Report highlights that the CPPA recovered more than USD170,000 of administrative fines for data...more

Benesch

The New Frontier of California Privacy Enforcement: A Tougher Era for Data Brokers

Benesch on

Last week, the Board of the Enforcement Division of the California Privacy Protection Agency (Agency) approved a settlement with California-based data broker Background Alert, Inc., requiring Background Alert to cease its...more

Orrick, Herrington & Sutcliffe LLP

California DFPI settles with data broker

On February 27, the California Privacy Protection Agency (CPPA) announced it reached a settlement with a data broker company that failed to register and pay an annual registration fee as required under the Delete Act. The...more

Sheppard Mullin Richter & Hampton LLP

New Year, Old Tradition: CPPA Focuses on Unregistered Data Brokers

The California privacy regulator recently settled with a data broker (Key Marketing Advantage LLC) that it alleged had violated the state’s data broker law. Under the Delete Act, data brokers must, among other things,...more

Orrick, Herrington & Sutcliffe LLP

CPPA settles with data broker and flags Jan. 31 deadline

On January 27, the Enforcement Division of the California Privacy Protection Agency (CPPA) settled with a data broker for failing to register and pay an annual fee, pertinent to the California Data Broker Registry under the...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Data Broker Edition: What Does It Mean for Businesses?

In the fifth in our series of California developments, we turn to data broker obligations. There are two of note. First, the California privacy agency is moving forward Delete Act regulations it proposed earlier this year....more

Ballard Spahr LLP

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Shook, Hardy & Bacon L.L.P.

California Jumps Into Privacy Rulemaking (Again)

The California Privacy Protection Agency (CPPA) is starting formal rulemaking (again) as they move beyond the pre-rulemaking drafts that were debated for a little over a year. During their November 8, 2024, board meeting, the...more

Carlton Fields

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

Sheppard Mullin Richter & Hampton LLP

The CPPA Signals Focus on Data Minimization and Consumer Requests

Earlier this month, the California Privacy Protection Agency (CPPA) issued its first-ever enforcement advisory (No. 2024-01). The advisory addresses what it calls the “foundational principle” of data minimization, and more...more

Nossaman LLP

California Privacy Protection Agency to Begin Enforcement Activities

Nossaman LLP on

After a successful appeal of a June ruling, the California Privacy Protection Agency (CPPA) is authorized to begin immediate enforcement of privacy regulations developed, and expanded, under the California Privacy Rights Act...more

Woods Rogers

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

Ballard Spahr LLP

CA Court of Appeals Decision Means CPPA May Start Enforcing CPRA Regulations

Ballard Spahr LLP on

On February 9, 2024, California’s Third District Court of Appeals reinstated the California Privacy Protection Agency’s (“CPPA”) ability to enforce the California Privacy Rights Act of 2020 (“CPRA”) regulations. The CPRA...more

Robinson+Cole Data Privacy + Security Insider

California Privacy Protection Agency Launches New Website with Privacy Rights Resources

Last week, the California Privacy Protection Agency (CPPA) launched a new website dedicated to providing resources to California residents about their privacy rights under the California Consumer Privacy Act (CCPA). The...more

Epstein Becker & Green

California Privacy Protection Agency Grapples with Cybersecurity Audit, Risk Assessment, Automated Decisionmaking Technology...

Epstein Becker & Green on

On December 8, 2023, the California Privacy Protection Agency (“CPPA”) Board (the “Board”) held a public meeting to discuss, among other things, regulations addressing: (1) cybersecurity audits; (2) risk assessments; and (3)...more

32 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide