Laws & Regulations

Go to Current Rulemaking | Preliminary Rulemaking Activities | Proposed Regulations | Completed Regulation Packages | Get Involved in Rulemaking Activities

In November 2020, California voters passed Proposition 24, which amended the California Consumer Privacy Act of 2018 ("CCPA") and established the California Privacy Protection Agency ("Agency"). The Agency is responsible for implementing and enforcing the CCPA as well as the Delete Act, which creates additional requirements unique to data brokers. To fulfill its duties, the Agency is authorized to adopt and amend regulations through the Administrative Procedures Act rulemaking process under both laws.

California Consumer Privacy Act

CCPA Regulations

California Consumer Privacy Act Regulations

Delete Act – Data Broker Registration & Accessible Deletion Mechanism

Delete Act

Delete Act Regulations

Data Broker Registration Regulations

Preliminary Rulemaking Activities

Below are topics that the Agency is considering moving to formal rulemaking, and they include records of stakeholder engagement and information gathering activities completed by the Agency to date. Proposals appearing below have not yet advanced to formal rulemaking.

Proposed Regulations

Below are draft regulations proposed by the Agency that are currently in the formal rulemaking process but have not yet been adopted and are therefore not in effect.

Accessible Deletion Mechanism – Delete Request and Opt-out Platform ("DROP") System Requirements – Public comment period on proposed modifications closed on August 18, 2025.

Completed Regulation Packages

Below are the rulemaking documents for regulations the Agency has already adopted.

CCPA Updates, Insurance, Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking Technology (ADMT) Regulations (September 2025)
Data Broker Registration Fee Regulation (December 2024)
Data Broker Registration Regulations (December 2024)
Data Broker Registration Fee Regulation (January 2024)
California Consumer Privacy Act Regulations (March 2023)
Transfer of Rulemaking Authority & New Division for CPPA Regulations (April 2022)
Conflict of Interest Code Regulation (February 2022)

Get Involved in Rulemaking Activities

To view tips for submitting public comment, view this PDF.

If you would like to receive notifications regarding rulemaking activities, please subscribe to our email list. You can also view tips for submitting effective public comment during formal rulemaking.