Regulations

Current Rulemaking Activity

In November 2020, California voters passed Proposition 24, the California Privacy Rights Act ("CPRA"). The CPRA amends and extends the California Consumer Privacy Act of 2018 ("CCPA"). To implement the law, the CPRA established the California Privacy Protection Agency ("Agency") and vested it with the full administrative power, authority and jurisdiction to implement and enforce the California Consumer Privacy Act of 2018. The Agency’s responsibilities include updating existing regulations, and adopting new regulations.

The California Attorney General’s Office has published an initial set of regulations implementing the CCPA. The CPRA now directs the new Agency to engage in further rulemaking on a variety of topics. The Agency will be promulgating regulations and soliciting broad public participation to further the purposes of the CCPA.

Notifications Regarding This Rulemaking Process

Information regarding the rulemaking process will be posted to this page. If you would like to receive notifications regarding rulemaking activities, please subscribe to our email list here.

Preliminary Rulemaking Activities

The Agency is currently engaging in preliminary information-gathering activities. Information collected during these preliminary activities will help inform the Agency’s rulemaking in advance of the formal rulemaking process. Public input at this stage will assist the Agency in developing new regulations, determining whether changes to existing regulations are necessary, and achieving the law’s regulatory objectives in the most effective manner.

Preliminary Rulemaking Activities: Written Public Comments

The Agency solicited preliminary written comments from the public via an initial Invitation for Comments from Sept 22, 2021 through Nov 8, 2021. That period has now closed and the public comments are available via the links below.

Preliminary Rulemaking Activities: Informational Hearings

The Agency held informational hearings to gather information and obtain further preliminary public input.

Informational Sessions
The Agency held a set of instructive informational sessions on Tuesday, March 29, 2022 and Wednesday, March 30, 2022 to inform the Agency Board, Agency staff, and the public on topics relevant to the upcoming rulemaking. The agenda, materials, and recordings of the informational sessions are available on our Meetings & Events page under March 29-30, 2022 Pre-Rulemaking Informational Sessions.

Stakeholder Sessions
The Agency also held a set of stakeholder sessions to provide an opportunity for stakeholders to speak on topics relevant to the upcoming rulemaking. The stakeholder sessions were held on May 4th, May 5th, and May 6th, 2022. To assist in accommodating the widest possible range of stakeholders, these meetings were held via videoconference. The agenda and recordings of the stakeholder sessions are available on our Meetings & Events page under May 4-6, 2022 Pre-Rulemaking Stakeholder Sessions.

Transfer of Rulemaking Authority

On October 21, 2021 the Agency provided formal notice to the California Attorney General that it is prepared to assume rulemaking activities under the CCPA. On April 21, 2022, rulemaking authority under the CCPA formally transferred to our Agency, pursuant to the CCPA, as provided for by the CPRA.

New Division for CPPA Regulations

On May 5, 2022, the California Office of Administrative Law (OAL), pursuant to Section 100 of OAL’s regulations, approved the transfer of the existing CCPA regulations to Title 11, Division 6, a new division of the California Code of Regulations that is under the jurisdiction of the Agency. While these amendments are non-substantive and merely renumber the existing CCPA regulations, they represent the beginning of the Agency’s rulemaking role.

More information about the Section 100 transfer can be found here, which includes an explanatory statement and a chart that explains the renumbering.

The text of the current CCPA regulations is available here.

Section 100 - Renumbering of the CCPA Regulations

Formal Rulemaking Activities

The Agency has not yet commenced formal rulemaking activities. It will do so once preliminary information-gathering is complete. Please check this page for updates or subscribe to our email list here.