Sign in Subscribe

California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) is California’s comprehensive privacy law and one of the most influential privacy frameworks in the United States. Explore CCPA requirements, CPRA amendments, CalPrivacy regulations and enforcement, consumer rights, sensitive personal information, sale and sharing, opt-out signals, ADMT, risk assessments, cybersecurity audits, data brokers, service providers, and other developments contributing to the broader “California Effect” on U.S. privacy.

California’s Age-Appropriate Design Code Gets a Rewrite: New Privacy Rules for Users Under 18

California’s Age-Appropriate Design Code Gets a Rewrite: New Privacy Rules for Users Under 18

California’s rewritten Age-Appropriate Design Code sets privacy defaults, age assurance, data limits, and design safeguards for online services likely to be accessed by children under 18.

Requirements for Automated Decision-making Technology (ADMT) Under the CCPA

Requirements for Automated Decision-making Technology (ADMT) Under the CCPA

A practical guide to California's ADMT regulations, including when Article 11 applies and how businesses can comply with its disclosure, opt-out, access, and governance requirements.

California’s CIPA Problem: How a 1967 Wiretap Law Became a Website-Tracking Litigation Machine—and What SB 690 Would Change

California’s CIPA Problem: How a 1967 Wiretap Law Became a Website-Tracking Litigation Machine—and What SB 690 Would Change

How did a 1967 wiretap law become a weapon against modern website tracking? CIPA has fueled claims over pixels, cookies, session replay, and pen registers. California’s SB 690 could sharply narrow that litigation—but it would leave important CIPA risks intact.

In the Matter of Cybba, Inc.

In the Matter of Cybba, Inc.

A practical analysis of CalPrivacy’s Cybba decision, addressing data broker registration under the Delete Act, targeted advertising and audience segmentation, and the growing importance of DROP in California’s data broker enforcement framework.

What Is a Risk Assessment Under the CCPA?

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.