On March 8, 2024, the California Privacy Protection Agency (“CPPA”) Board voted to advance to formal rulemaking proposed regulations under the California Consumer Privacy Act, as amended, regarding risk assessments, automated decisionmaking technology, and certain updates to existing regulations. The formal rulemaking action will begin when the CPPA publishes a proposed action in the California Regulatory Notice Register, after which time the CPPA will have one year to complete the rulemaking process and submit the completed rulemaking file to the California Office of Administrative Law. The public will have at least a 45-day period to comment in writing on the proposed regulations. If the CPPA substantially modifies the draft regulations following the public comment period, the CPPA will be required to make the modified proposed regulations available for public comment for at least fifteen days. The effective date of the proposed regulations will depend on when the final regulations are filed with the Secretary of State.
Please contact Alston & Bird’s Privacy, Cyber & Data Strategy team if you have any questions.