|
|
Press Announcement from State of California Department of Justice (June 2, 2020)
Attorney General Becerra Submits Proposed Regulations for Approval Under the California Consumer Privacy Act
California Attorney General Xavier Becerra submitted proposed regulations under the California Consumer Privacy Act (CCPA) to the California Office of Administrative Law (OAL). The regulations will provide guidance to businesses on how to comply with the CCPA and will enable consumers to exercise new rights over their personal information. Under Executive Order N-40-20 related to the COVID-19 pandemic, OAL has 30 working days and an additional 60 calendar days to determine whether the regulations satisfy the procedural requirements of the Administrative Procedure Act. Once approved by the OAL, the regulation text will be filed with the Secretary of State and become enforceable by law.
“As our lives increasingly move online, our data privacy becomes more important than ever. The California Consumer Privacy Act, which gives consumers choice and control over personal information in the marketplace, is game-changing and historic,” said Attorney General Becerra. “Our regulations provide businesses and individuals with guidance on how to protect that choice and boost transparency, while continuing to unleash innovation. Businesses have had since January 1 to comply with the law, and we are committed to enforcing it starting July 1.”
CCPA was signed into law on June 28, 2018, and was further amended on September 23, 2018 by SB 1121 and on October 11, 2019 by AB 25, AB 874, AB 1146, AB 1355, and AB 1564. The law went into effect on January 1, 2020. CCPA grants California consumers robust data privacy rights and control over their personal information including the right to know, the right to delete, and the right to opt-out of the sale of personal information that businesses collect, and includes additional protections for minors. The regulations establish procedures for compliance and exercise of rights, as well as clarifying important transparency and accountability mechanisms for businesses subject to the law. The Attorney General can enforce the CCPA beginning on July 1, 2020.
The regulations were drafted after a broad and inclusive preliminary rulemaking process, which included seven public forums, during which the office received over 300 letters. During the formal rulemaking process, Attorney General Becerra held four public hearings throughout the state, along with a 45-day comment period and two subsequent 15-day comment periods. These comment periods resulted in the submission of over 1,000 public comments, each of which were taken into consideration when drafting the final regulations.
A copy of the rulemaking package submitted to OAL, including a text of the regulations, can be found here.
Proposed Text of Regulations (PDF) Mouseover to Scroll
CCPA-Proposed-Text-of-RegulationsOriginal Source: State of California Department of Justice
Additional Reading
- Evaluating Corporate Compliance? Updated DOJ Criminal Division Guidance
- New From NIST: Integrating Cybersecurity and Enterprise Risk Management (ERM)
Source: ComplexDiscovery
