The California Privacy Protection Agency Board (the “Board”) held a public meeting on February 3, 2023, adopting and approving the current set of draft rules (the “Draft Rules”), which implement and clarify the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act of 2020 (“CPRA”). The Draft Rules cover many CCPA requirements, including restrictions on the collection and use of personal information, transparency obligations, consumer rights and responding to consumer requests, and service provider contract requirements. At the meeting, the Board also addressed additional proposed rulemaking processes concerning cybersecurity audits, risk assessments, and automated decision-making.
Recent Updates
- The Second Circuit Joins Fellow Circuits in Extending Limitations on Mandatory Arbitration Agreements
- Updating Your First Aid Kit: What Employers Need to Know About Opioid Antagonist Requirements in New York
- New DOL Guidance Reiterates Key Priorities for MHPAEA Enforcement - Takeaways for Plan Sponsors
- Shh! Press the Button: New York State DOL Proposes Silent Response Button Rules for Retail Workplace Violence Prevention
- New Jersey’s Employer Response Portal: What You Need to Know