Sign in Subscribe

California

California has long played a leading role in shaping U.S. privacy, technology, and AI regulation. The “California Effect” describes how the state’s laws and regulatory standards can influence business practices and policymaking far beyond its borders. Explore the CCPA and CPRA, CPPA regulations and enforcement, consumer rights, ADMT, cybersecurity, risk assessments, data brokers, children’s privacy, biometrics, AI governance, and other developments driving U.S. privacy and AI policy.

In the Matter of Cybba, Inc.

In the Matter of Cybba, Inc.

A practical analysis of CalPrivacy’s Cybba decision, addressing data broker registration under the Delete Act, targeted advertising and audience segmentation, and the growing importance of DROP in California’s data broker enforcement framework.

What Is a Risk Assessment Under the CCPA?

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

The Delete Act: California’s New Framework for Data Broker Accountability

The Delete Act: California’s New Framework for Data Broker Accountability

California's Delete Act transforms data broker regulation into a comprehensive operational compliance framework. Learn who qualifies as a data broker and how to comply with registration, disclosure, deletion, audit, and ongoing governance obligations.

In the Matter of Disney DTC, LLC and ABC Enterprises, Inc.

In the Matter of Disney DTC, LLC and ABC Enterprises, Inc.

The Disney CCPA settlement signals a shift from formal compliance to architectural compliance. Learn why opt-out rights must function across accounts, devices, services, and ad-tech ecosystems—not just exist on paper.

California’s AI Training Data Transparency Law: What Generative AI Developers Must Disclose

California’s AI Training Data Transparency Law: What Generative AI Developers Must Disclose

California’s AI Training Data Transparency Law requires generative AI developers to disclose key information about training datasets, including their sources, contents, use of personal information, licensing, modifications, collection periods, and synthetic data.

In the Matter of ROR Partners, LLC

In the Matter of ROR Partners, LLC

A practical analysis of CalPrivacy's ROR Partners decision, explaining why custom audiences, inferred profiles, and behavioral segments can constitute the sale of personal information and trigger California's data broker registration requirements.