California Consumer Privacy Act Regulations

On July 8, 2022, the California Privacy Protection Agency commenced the formal rulemaking process to adopt regulations to implement the Consumer Privacy Rights Act of 2020 (CPRA). The proposed regulations: (1) update existing CCPA regulations to harmonize them with CPRA amendments to the CCPA; (2) operationalize new rights and concepts introduced by the CPRA to provide clarity and specificity to implement the law; and (3) reorganize and consolidate requirements set forth in the law to make the regulations easier to follow and understand.

Notice Register Publication Date: July 8, 2022

Status of the Proposal: The rulemaking is complete. On March 29, 2023, the Office of Administrative Law approved the California Privacy Protection Agency’s regulations and filed them with the Secretary of State. The regulations became effective on March 29, 2023.

Rulemaking 1

A. Documents

March 29, 2023 - Final Rulemaking Documents

November 3, 2022 – Public Notice of Proposed Modifications and Additional Materials Relied Upon

July 8, 2022 - Public Notice of Rulemaking and Related Documents

B. Public Comments

Comments received during the 45 Day Comment Periods are linked below.

Comments received during the 15 Day Comment Period are linked below.