The California Privacy Protectio...
The California Privacy Protection Agency...

The California Privacy Protection Agency (CPPA) Files Notice of Proposed Rulemaking for the CPRA

The CPPA filed a notice that starts the rulemaking process for the CPRA

Alexis Kateifides OneTrust Senior Center of Excellence Counsel

clock2 Min Read

Featured Image

The CPPA announced on July 8, 2022, that it is beginning the process to adopt regulations to implement the Consumer Privacy Rights Act of 2020 (CPRA). This comes on the heels of two important events for the CPPA. On April 21, 2022, rulemaking authority under California Consumer Privacy Act (CCPA) was transferred to the CPPA, and shortly after, on May 27, 2022, it announced a board meeting in June to discuss a draft version of the proposed regulations.  

When will the CPRA regulations come into effect? 

Now that the CPPA officially filed a notice with respect to its proposed regulations, the next phase is a 45-day public comment period. This means that until August 23, 2022, the CPPA will accept written comments on the regulations. The CPPA is then set to hold a public hearing on August 24 and 25, 2022.  

These dates do come with the following caveats: 

  1. If major changes are made to the proposed regulations, the CPPA must extend another 45 days for a second round of comments to be made on the updated regulations. 
  2. In the case of substantial changes, the CPPA must extend the comment period for another 15 days for further comments to be made.  

What happens to the CCPA regulations? 

With the CPRA set to come into effect and amend the CCPA, the CPPA proposed regulations aim to address three main areas.  

  1. Make sure that current CCPA regulations are updated to harmonize them with CPRA amendments 
  2. Operationalize the new rights and concepts under the CPRA 
  3. Present the new regulations and requirements from the CPRA in a way that makes them easier to understand  

What does this mean for your organization?  

With the CPRA coming into effect on January 1st, 2023, organizations still have nearly six months until these new regulations are here to stay. The CPRA Proposed Regulations will be a welcome addition for compliance efforts, as they’re geared towards helping operationalize CPRA requirements. While the current public hearing date is set at August 24 and 25, 2022, regulations under the CCPA underwent several reviews, so there may be further developments yet to unfold.    

To learn more about maintaining CPRA compliance, take a look at OneTrust’s CPRA compliance solution and see how your organization can handle these new rights and requirements with ease.  

CPRA compliance

You Might Also Be Interested In

NOVEMBER 28, 2022

From Sapin II to Sapin III: France’s anti-corruption fight

NOVEMBER 25, 2022

7 myths about SOC 2 compliance

NOVEMBER 18, 2022

What every Chief Privacy Officer should know  about third-party risk management

NOVEMBER 17, 2022

The role of disclosures in risk assessment and mitigation 

NOVEMBER 15, 2022

US climate risk rule could affect more than 5,700 federal suppliers

NOVEMBER 14, 2022

The COP27 climate summit: What to expect and why it matters

NOVEMBER 10, 2022

CSRD update: EU approves new ESG disclosure rules

NOVEMBER 9, 2022

SOC 2: Starting your audit process

Onetrust All Rights Reserved