“The proposed regulations are based on several years of preliminary rulemaking activities, including receiving written comments from the public, hosting stakeholder sessions throughout the state and meeting with stakeholders to receive invaluable feedback,” CPPA said in a news release. “Now in formal rulemaking, CPPA has extended the public comment period beyond the 45-day statutory requirement to ensure ample opportunity for participation.”
The proposed changes include:
- Updates to existing California Consumer Privacy Act (CCPA) regulations
- Establishment of requirements for certain businesses to complete annual cybersecurity audits and conduct risk assessments
- Implementation of consumers’ rights to access and opt out of businesses’ use of automated decision-making technology
- Clarification of when insurance companies must comply with the CCPA
CPPA opened the comment period Friday and will accept input until Jan. 14. Those wishing to comment in person may do so at a hybrid public hearing from 2 p.m. to 6 p.m. that day at the Cannabis Control Appeals Panel Hearing Room, 400 R St., Suite 330, in Sacramento. Those wishing to join virtually may do so, as well.
CPPA’s website offers guidance to those seeking information on how to exercise their rights and protect their personal information, and it contains details about CPPA board meetings, announcements and the rulemaking process.
