Businesses’ mishandling of consumer personal data has resulted in data breaches and an erosion of individuals’ rights, members of a California agency tasked with writing privacy risk assessment rules said.

The California Privacy Protection Agency (CPPA) met last week to consider its next batch of rulemaking under the California Consumer Privacy Act, which is set to include requirements for businesses handling the personal data of Californians to conduct risk assessments.

Adrianne Appel writes regulatory news, policy, and trends for Compliance Week. She previously reported about policy developments for Bloomberg Law and Bloomberg Government. Email: adrianne.appel@complianceweek.com LinkedIn:...