In November 2020, California voters passed Proposition 24, the California Privacy Rights Act (“Prop 24”). The CPRA amends and extends the California Consumer Privacy Act of 2018 (“CCPA”). To implement the law, the CPRA established the California Privacy Protection Agency (“Agency”) and vested it with the full administrative power, authority and jurisdiction to implement and enforce the California Consumer Privacy Act of 2018. The Agency’s responsibilities include updating existing regulations and adopting new regulations.
On April 21, 2022, rulemaking authority under the CCPA transferred to the new Agency and it is now engaging in preliminary rulemaking activities. On June 8th, the Agency’s Board will have a public zoom meeting to discuss the first step in this process.
Under Prop 24, the Agency has until July 1, 2022 to finalize regulations, but given this late release and the time required for formal rulemaking, it is unlikely that any regulations will be finalized before Prop 24 goes into effect on January 1, 2023.
Below is the draft released by the Agency. A section-by-section analysis of the draft is available here.
Cyber Report 