Article
The CPPA Finalizes Rules On ADMT, Risk Assessments, And Cybersecurity Audits
The third primary rule establishes that any CCPA-bound business
whose data processing could pose "significant risk to
consumers' security" must complete an independent
cybersecurity audit annually

Baker Botts L.L.P.
