CPPA Board Declines to Advance CCPA Regulations to Formal Rulemaking; CPPA Highlights Enforcement Priorities

The California Privacy Protection Agency (CPPA) has finalized sweeping new California Consumer Privacy Act (CCPA) regulations on automated decisionmaking technology (ADMT), cybersecurity audits, and privacy risk assessments. Our Privacy, Cyber & Data Strategy Team outlines the key compliance standards and how they may extend the CCPA’s reach to businesses previously outside its scope.

On July 24, 2025, the California Privacy Protection Agency (“CPPA”) Board voted to adopt draft regulations under the California Consumer Privacy Act (“CCPA”) concerning cybersecurity audits, risk assessments, automated decisionmaking technologies, and the CCPA’s application to insurance companies. The approved regulations also include certain updates to the existing CCPA regulations. The CPPA will now submit […]

The post CPPA Board Votes to Adopt CCPA Regulations; Open DROP Rules to Public Comment appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

On May 1, 2025, the California Privacy Protection Agency (“CPPA”) Board convened to discuss revisions to the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic decisionmaking technology (“ADMT”), insurance, and updates to the existing CCPA regulations. The revisions were informed by comments received by the CPPA during the formal public […]

The post CPPA Issues Revised Draft CCPA Regulations; Votes to Initiate Public Comment Period appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.