CPPA preview: Cybersecurity audit regs nearing formal proposal
By 
Adrianne Appel2024-01-09T20:16:00
Companies with business in California could face tough new cybersecurity mandates under draft regulations that are soon headed for formal rulemaking.
The California Privacy Protection Agency (CPPA) is expected to vote as early as Friday to launch the formal rulemaking process for a series of cybersecurity audit requirements on businesses. Once approved for formal rulemaking, the draft regulations would be open 45 days for public comment before being finalized. Businesses would then have two years to come into compliance with the rules.
Two other packages of draft rules, one on data risk assessments and another on automated decision-making technology, are still being debated by the five-member CPPA, which was tasked with writing and enforcing privacy rules under amendments to the California Consumer Privacy Act passed in 2020.
Related articles
-
PremiumWhat’s on tap for CPPA from its deputy director of enforcement
Michael Macko, deputy director of enforcement at the California Privacy Protection Agency, described priorities for the agency now and in the near future during a recent board meeting.
-
News BriefCPPA warns of collecting too much data in first enforcement advisory
The California Privacy Protection Agency warned businesses to stop asking for excessive information from consumers who have requested to opt out of having their data collected or who are otherwise exercising their privacy rights under the California Consumer Privacy Act.
-
News BriefCalif. AG launches sweep into streaming apps’ compliance with CCPA
California Attorney General Rob Bonta announced the launch of an investigative sweep targeting popular streaming apps and devices, alleging noncompliance with the California Consumer Privacy Act.
More from Regulatory Policy
-
ArticleU.K. updates pension and asset manager rules, but internal auditors flag governance gaps
Will “taking an axe to” red tape and onerous reporting commitments free up trillions invested in U.K. pensions and increase the value of assets managed by regulated financial services firms?
-
News BriefU.S. Labor Department advances sweeping deregulation push targeting worker protections
The U.S. Department of Labor (DOL) appears to be in the process of deregulating work rules. Some of the changes proposed would result in a reduction of pay for certain health workers and allow minors to work hazardous jobs.
-
News BriefAtkins says SEC to embrace innovation, criticizes regulatory uncertainty around tokenization
SEC Chair Paul Atkins pointed to the growth of tokenized shares as a key development reshaping private markets, suggesting the agency is preparing to update its rules to keep pace with new forms of digital asset trading and settlement.