California's New Privacy Regulator Invites You To Comment

As you may recall, the California Privacy Rights Act ("CPRA") established a new state privacy regulatory agency, the California Privacy Protection Agency Board ("CPPA Board"), and the CPRA vests certain rulemaking authority (along with enforcement authority) to the CPAA Board. The CPPA Board has issued an invitation for preliminary comments from the public related to a wide swath of areas over which the CPPA Board has rulemaking authority. According to the invitation, comments may be used in developing new regulations under the CPRA, and determining whether changes to the existing regulations are needed to implement the CPRA.

Key topics for public comment include:

• processing that presents a significant risk to consumers' privacy or security: cybersecurity audits and risk assessments performed by businesses;