Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

California's Latest Privacy Rulemaking Proposes Further Obligations for Businesses  

By Kyle Fath, Alan Friel, Shea Leitch and David J. Oberly
August 01, 2022

In May, the California Privacy Protection Agency (CPPA or Agency) released the first draft of its much-anticipated proposed California Privacy Rights Act of 2020 (CPRA) Regulations (Regs), as well as the Agency's Initial Statement of Reasons. Although useful for the purpose of indicating what the Agency's priorities may be, the draft Regs are far from complete. Of note, the Regs purposely omit provisions on key topics, including automated decision-making and profiling, cybersecurity audits, and risk assessments; consequently, companies should expect the Regs to expand far beyond their current 66-page length.

On July 8, 2022, the Agency commenced its formal rulemaking process to adopt the proposed Regs with the filing of a Notice of Proposed Rulemaking. The Notice triggered the beginning of a 45-day public comment period, which will end on Aug. 23, 2022. The CPPA will also host public hearings on Aug. 24 and 25, 2022. After the close of the 45-day comment period, the CPPA will then determine whether to adopt the Regs substantially or, alternatively, make additional modifications based on comments submitted to the Agency. In the event the CPPA decides to move forward with making "major" modifications to the original draft Regs, a corresponding 45-day comment period will be provided; if the CCPA modifications are deemed to be only "substantial and sufficiently related," the comment period will last for only 15 days.

This article discusses the most important aspects of, and other key takeaways from, the CPPA's initial iteration of the Regs.

This premium content is locked for Entertainment Law & Finance subscribers only

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473

Read These Next
Supreme Court Hears Arguments In Corporate Trademark Infringement Remedy Calculation Case Image

The business-law issue of whether and when a corporate defendant is considered distinct from its affiliated entities emerged on December 11 at the U.S. Supreme Court, with the justices confronting whether a non-defendant’s affiliate’s revenue can be part of a judge’s calculation of the monetary remedy for the corporate defendant’s infringement of a trademark.

Navigating AI Risks: Best Practices for Compliance and Security Image

The most forward-thinking companies embrace AI with complete confidence because they have created governance programs that serve as guardrails for this incredible new technology. Effective governance ensures AI consistently aligns with an organization’s best interests, safeguarding against potential risks while unlocking its full potential.

What Will 2025 Bring for Legal Tech Image

It’s time for our annual poll of experts on what they expect 2025 to bring in legal tech, including generative AI (of course), e-discovery, and more.

AIAs: A Look At the Future of AI-Related Contracts Image

AI’s rapid market proliferation and regulatory expansion mirrors privacy’s, and businesses should model their contractual AI compliance on the successes of privacy law’s DPA and BAA.

The Death of SEO: How AI Is Impacting Search, PPC and Cookies Image

Traditional keyword strategies and ranking tactics are losing ground to a more dynamic approach in which optimizing for search now means optimizing for every platform and user interaction. This evolution is appropriately being called “Search Everywhere Optimization.” The redefined SEO reflects how AI is not just changing how people find information but also how businesses need to think about visibility in an increasingly connected digital ecosystem.