"A New Era Of Privacy Enforcement": CPPA Signals Intensified Oversight While Advancing New Regulations

150 consumer complaints per week. A consortium of privacy regulators. "Hundreds of open investigations."

These were some of the highlights from the California Consumer Privacy Protection Agency (CPPA) Board meeting on September 26, 2025. In addition to these enforcement updates, the Board advanced regulatory initiatives and introduced new concepts for future rulemaking. The meeting was the first for Board member Jill Hamer, who replaced Jeffrey Worthe (see announcement here).

Below, we summarize key updates from the meeting regarding increased enforcement and new regulatory requirements on the horizon.

CCPA Regulations Approved

At the outset, the CPPA announced that the California Office of Administrative Law (OAL) had approved the regulations on cybersecurity audits, risk assessments, and automated decision-making technology (ADMT).