On 8 July 2022, the California Privacy Protection Agency (CPPA) filed the formal ‘Notice of Proposed Rulemaking’ on regulations that address the amendments made through the California Privacy Rights Act (CPRA). This notice triggered a public comment period that will last until 23 August 2022. The proposed draft regulations, first released with little fanfare on 27 May 2022, are far-reaching and implicate a variety of topics. In addition, the CPPA published an “Initial Statement of Reasons” that offers additional commentary and context for the draft rules. Notably, the CPPA stated this draft is not a comprehensive draft; further regulations related to automated decision-making, privacy impact assessments, and cybersecurity audits will be announced at a later date.