California Privacy Regulations
The California Privacy Protection Agency Board met on February 3rd to discuss rules implementing the California Privacy Rights Act (CPRA).
During the meeting, the board voted to approve their final rulemaking package under the CPRA. The Board also issued a final statement of reasons outlining changes to the rules. The rules will now be sent to the Office of Administrative Law (OAL), who will have 30 business days upon receipt to review the rules.
If approved, the rules would take effect on July 1, 2023. Learn more on the OAL website.
AFSA commented six times since 2019 during the state’s privacy rulemaking process.The board also voted to publish an invitation for comments on proposed rules governing cybersecurity audits, risk assessments, and automated decisionmaking. The agency is looking for stakeholder feedback and has not yet written any proposed rule text. The 45-day comment period will open when the notice for comments is officially filed.
AFSA is planning to send the board comments. Please send any provide feedback for AFSA’s letter to Matt Kownacki by COB Friday, March 10.
February 11th, 2023
