Privacy Law Matters Blog

By Sam Castic The California Privacy Protection Agency (CPPA) has adopted final regulations on privacy risk assessments, cybersecurity audits, and automated decisionmaking technology (ADMT), as well as amendments to existing CCPA regulations.  Final publication of the regulations is pending review by the Office of Administrative Law, and depending on when that occurs, the regulations will…

by Felicity Slater and Susan Hintze  On April 16, 2025, the California Privacy Protection Agency (CPPA) and state Attorneys General from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, and Oregon announced the formation of the bipartisan "Consortium of Privacy Regulators." The focus of the Consortium will be to foster multi-state coordination, including sharing of expertise…

By Taylor Widawski UPDATE: Governor Gavin Newsom signed the California Delete Act into law on October 10, 2023. The law takes effect August 2026. Another amendment to the California data broker law, SB 361, was also signed into law by Governor Newsome on October 8, 2025- see blog post here - those amendments take effect…