Sign in Subscribe

Topic

CalPrivacy

CalPrivacy, the California Privacy Protection Agency (CPPA), is California’s dedicated privacy regulator and a key force shaping U.S. privacy policy. Explore CalPrivacy rulemaking, guidance and enforcement under the CCPA and CPRA, including consumer rights, ADMT, risk assessments, cybersecurity audits, data brokers, sensitive data, opt-out mechanisms, privacy governance, and developments contributing to the broader “California Effect” on U.S. privacy regulation.

In the Matter of Cybba, Inc.

A practical analysis of CalPrivacy’s Cybba decision, addressing data broker registration under the Delete Act, targeted advertising and audience segmentation, and the growing importance of DROP in California’s data broker enforcement framework.

In the Matter of LocateSmarter, LLC

A practical analysis of CalPrivacy’s LocateSmarter decision, addressing data broker registration, the CCPA’s data minimization principle, and why businesses cannot require consumers to provide sensitive personal information to exercise the right to opt out of sale or sharing.

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

Requirements for Automated Decision-making Technology (ADMT) Under the CCPA

A practical guide to California's ADMT regulations, including when Article 11 applies and how businesses can comply with its disclosure, opt-out, access, and governance requirements.

The Delete Act: California’s New Framework for Data Broker Accountability

California's Delete Act transforms data broker regulation into a comprehensive operational compliance framework. Learn who qualifies as a data broker and how to comply with registration, disclosure, deletion, audit, and ongoing governance obligations.

In the Matter of ROR Partners, LLC

A practical analysis of CalPrivacy's ROR Partners decision, explaining why custom audiences, inferred profiles, and behavioral segments can constitute the sale of personal information and trigger California's data broker registration requirements.

In the Matter of Tractor Supply Company

California's first major CCPA enforcement action against Tractor Supply signals a new era of operational privacy compliance. This article examines the CPPA's findings, the extension of CCPA obligations to job applicants, and the practical lessons for businesses.