CPPA Board Unanimously Votes to Advance Regulations (2/3/2023)

UK Version of GDPR

The California Privacy Protection Agency (CPPA) Board voted unanimously today to adopt and approve the Agency’s rulemaking package, as modified, to further implement the California Consumer Privacy Act (CCPA). The Board also voted to direct staff to take all steps necessary to complete the rulemaking process, including the filing of the final rulemaking package with the Office of Administrative Law (OAL).

The proposed regulations are not yet in effect. They must first be approved by the OAL, which has 30 business days to review from the date of their submission. More information about the rulemaking process is available on the Agency’s website.

The CPPA began the formal rulemaking process to adopt proposed regulations to further implement the CCPA on July 8, 2022. The proposed regulations (1) update existing CCPA regulations to harmonize them with amendments to the CCPA adopted under Proposition 24, the California Privacy Rights Act (CPRA); (2) operationalize new rights and concepts introduced by the CPRA to provide clarity and specificity to implement the law, and (3) reorganize and consolidate requirements outlined in the law to make the regulations easier to follow and understand.

The CCPA provides Californians with key privacy rights, including the right to know the personal information collected about them by businesses, the right to delete that information, and the right to stop its sale to third parties. In November 2020, California voters approved Proposition 24, the California Privacy Rights Act, which amended and expanded the CCPA, created the Agency—the first independent data protection authority in the United States—and vested it with the authority to implement and enforce the CCPA.

Source; https://cppa.ca.gov/announcements/

Picture of Dposphere

Dposphere

Recent Post

EU plans major updates to GDPR and cookie rules, aiming to strengthen data protection and clarify
Taylor Wessing details recent GDPR injunction cases and offers guidance on compliance strategies to navigate evolving
Manual paperwork can leave firms vulnerable to GDPR fines. Automation and strict record‑keeping are key to