Further Updates To The CPPA Proposed Regulations: Risk Assessments And Automated Decisionmaking Technology

After years of internal discussion, the Board of the California Privacy Protection Agency (CPPA), at their March 8th meeting, voted to progress toward formalizing the proposed regulations on risk assessments and automated decisionmaking technology (ADMT). Following a presentation from CPPA staff on the recent updates to the proposed regulations, as further described below, the Board engaged in a lively debate over two key issues: (i) the scope of the application of these proposed regulations (with Board members firmly expressing opposing positions) and (ii) the appropriate timing to advance the proposed regulations. After a lengthy meeting and significant public comment, the Board authorized CPPA staff in a narrow 3:2 vote to advance the proposed regulations on risk assessments and ADMT towards the formal rulemaking process by authorizing CPPA staff to begin preparation of the necessary paperwork for final approval and to solicit additional stakeholder feedback.