California’s Office of Administrative Law (OAL) has approved the California Privacy Protection Agency’s (CPPA) first substantive rulemaking package to further implement the California Consumer Privacy Act (CCPA). The approved regulations update existing CCPA regulations to harmonize them with amendments adopted pursuant to Proposition 24, the California Privacy Rights Act (CPRA); operationalize new rights and concepts introduced by the CPRA to provide clarity and specificity to implement the law; and reorganize and consolidate requirements set forth in the law to make the regulations easier to follow and understand. They place the consumer in a position where they can knowingly and freely negotiate with a business over the business’s use of the consumer’s personal information.
What this Means to You
The approved regulations are effective immediately. These regulations and the CCPA’s statutory requirements are in effect and businesses, including eligible financial institutions, are required to comply. However, civil and administrative enforcement of the provisions of law added or amended by the CPRA will not begin until July 1, 2023, and will only apply to violations occurring on or after that date.
For more information about the final regulations, visit California’s California Consumer Privacy Act Regulations webpage.