California Privacy Protection Agency opens draft regulations for public comment

Changes are expected to consent and opt-out provisions. By Lindsey TonsagerClaire O’Rourke, and Kimberly Railey of Covington and Burling in the US.

On 8 July 2022, the California Privacy Protection Agency (CPPA) filed the formal ‘Notice of Proposed Rulemaking’ on regulations that address the amendments made through the California Privacy Rights Act (CPRA). This notice triggered a public comment period that will last until 23 August 2022. The proposed draft regulations, first released with little fanfare on 27 May 2022, are far-reaching and implicate a variety of topics. In addition, the CPPA published an “Initial Statement of Reasons” that offers additional commentary and context for the draft rules. Notably, the CPPA stated this draft is not a comprehensive draft; further regulations related to automated decision-making, privacy impact assessments, and cybersecurity audits will be announced at a later date.

Continue Reading

International Report subscribers please login to access the full article


If you wish to subscribe, please see our subscription information.