California privacy reg seeking more input on new rules

Businesses will receive additional time to weigh in on proposed regulations by California’s new data protection authority regarding risk assessments, cybersecurity audits, automated decision-making, and data broker registration before they’re potentially finalized later this year.

The California Privacy Protection Agency (CPPA) is the body responsible for writing and enforcing data privacy regulations under the California Consumer Privacy Act (CCPA). The law gives California residents and some employees rights over personal data collected by businesses, such as opting out of having their personal data collected or the right to have their data deleted.

In April, the CPPA issued its first enforcement advisory, warning businesses regarding how it expects them to respond to consumer opt-out requests.