March 27, 2023

Volume XIII, Number 86


March 24, 2023

Subscribe to Latest Legal News and Analysis

Movement on CPRA Regulations Expected

On Friday, February 3, the CPPA is scheduled to meet about current and forthcoming CPRA regulations. The Board had previously signaled that it expected to finalize the draft regulations in late January or early February 2023. The agenda confirms that the CPRA regulations will be discussed, including “possible adoption” or “modification” of the text.

Also of interest on the agenda is discussion of rulemaking activities for new rules on risk assessments, cybersecurity audits, and automated decision-making. These topics are of great interest to companies, particularly US-only companies who may not be currently subject to any laws that contemplate these types of requirements.

Putting it into practice. With CPRA’s effective date of January 1, most companies have been implementing the regulations as currently drafted. However, finalization of the rules will bring welcomed “closure” to companies as they continue to operationalize CPRA compliance. Companies should also keep a close eye on the forthcoming regulations on the other topics as these will likely drive the need for additional actions.

Copyright © 2023, Sheppard Mullin Richter & Hampton LLP.National Law Review, Volume XIII, Number 30

About this Author

Julia Kadish is an attorney in the Intellectual Property Practice Group in the firm's Chicago office.

Areas of Practice

Julia's practice focuses on data breach response and preparedness, reviewing clients' products and services for privacy implications, drafting online terms and conditions and privacy policies, and advising clients on cross-border data transfers and compliance with US and international privacy regulations and standards. She also workes on drafting and negotiating software licenses, data security exhibits, big data licenses, professional...