California Privacy Protection Agency continues to modify draft CPRA regulations.

With a mere 6 weeks or so before the CPRA comes into effect, the CPRA regulations are still not finalized. And there is at least one more round of regulations to address things like privacy impact assessments and security audits (and hopefully how the CPRA will apply to employment and business-to-business information). 

The California Privacy Protection Agency (CPPA) held a board meeting on October 28 – 29, 2022 (the “Meeting”) to review proposed modifications to the California Privacy Rights Act (CPRA). The CPRA is effectively an amendment to the California Consumer Privacy Act (CCPA) that went into effect on January 1, 2020 and will become effective on January 1, 2023. In the leadup to the CPRA effective date, the CPPA accepted input from the public during a comment period that ended on August 23, 2022. The response from the public during the comment period was substantial and resulted in thousands of pages of written comments, resulting in the CPPA making proposed revisions to the CPRA regulations that were the subject of the Meeting.

View referenced article