CPPA extends comment period for regulations to mid-February 2025
January 24, 2025
On January 16, the California Privacy Protection Agency extended the public comment period for its proposed rulemaking package to February 19 due to wildfires affecting the state. The package updates current regulations and introduces new rules for cybersecurity audits and risk assessments, implements consumers’ rights to access and opt-out of businesses’ use of automated decision-making technology, and clarifies when insurance companies must comply with the California Consumer Privacy Act.
The comment period, which opened on November 22, 2024, allows stakeholders to submit comments via email until 6 p.m. PST on February 19. A public comment hearing will be held that day, with virtual and in-person attendance options in Sacramento.