On March 29, 2023, California’s Office of Administrative Law (OAL) approved the California Privacy Protection Agency (CPPA) Board’s initial package of regulations under the California Privacy Rights Act (CPRA).
The final CPRA regulations (“CPRA Regulations”) cover a wide array of topics including consumer rights, business’s obligations in handling personal information, user interface design, sharing of information with third parties, additional protections for sensitive personal information, cross-context behavioral advertising, global privacy controls, cybersecurity audits, risk assessments and enforcement procedures. The proposed final CPRA Regulations are intended to provide clarity and specificity to implement the law and address feedback from public comment periods.
