The California Privacy Protection Agency has announced the end to the California Privacy Rights Act rulemaking process. The regulations were approved by the Office of Administrative Law and became effective March 29, 2023. 

These regulations: (1) update existing CCPA regulations to align these with the CPRA amendments; (2) operationalize new rights and concepts in the CPRA including rights to correct and opt-out of shares of personal information; and (3) reorganize and consolidate requirements set forth in the CPRA. 

For additional takeaways on the CPRA Regs, please see our previous posts here, here, and here. 

The CPPA is continuing its rulemaking process and is currently engaged in preliminary rulemaking activities on cybersecurity audits, risk assessments, and automated decision-making.