California Privacy Protection Agency Begins CCPA Rulemaking Process

The California Privacy Protection Agency on July 8, 2022, kicked off the formal rulemaking process to adopt proposed regulations that implement the Consumer Privacy Rights Act of 2020 (CPRA), which amends and expands the California Consumer Privacy Act (CCPA). For an analysis on the themes and key provisions of the draft rules, see the Holland & Knight alert "Early Draft of California Privacy Regulations Focuses on Opt-Out Rights, Disclosures ," June 1, 2022.

According to the Agency's Initial Statement of Reasons, the proposed regulations "place the consumer in a position where they can knowingly and freely negotiate with a business over the business's use of the consumer's personal information." Among other things, the proposed regulations 1) update existing CCPA regulations to address the CPRA amendments; 2) provide guidance to consumers, businesses, service providers and third parties on how to operationalize new rights and concepts introduced by the CPRA; and