Final Proposed CCPA Regulations Submitted

I am taking a break from my blogging on the California Privacy Rights Act (CPRA) to deliver breaking news: California Attorney General Xavier Becerra has just now submitted the final proposed regulations for the California Consumer Privacy Act (CCPA) to the California Office of Administrative Law (OAL). Per Becerra's office: "The regulations will provide guidance to businesses on how to comply with the CCPA and will enable consumers to exercise new rights over their personal information. Under Executive Order N-40-20 related to the COVID-19 pandemic, OAL has 30 working days and an additional 60 calendar days to determine whether the regulations satisfy the procedural requirements of the Administrative Procedure Act. Once approved by the OAL, the final regulation text will be filed with the Secretary of State and become enforceable by law."

I will dig into these final proposed regulations in future blog posts (once I finish my look at the California Privacy Rights Act aka CPRA aka Version 2.0 of the CCPA). For those who want to read it now, a copy of the complete rulemaking package submitted to OAL can be found at www.oag.ca.gov/ccpa.

It is interesting how the webpage above positions the CCPA as very much about the individual privacy rights that California residents will get: "CCPA grants California consumers robust data privacy rights and control over their personal information, including the right to know, the right to delete, and the right to opt-out of the sale of personal information that businesses collect, as well as additional protections for minors."

As a reminder, the CCPA was signed into law on June 28, 2018, and went into effect on January 1, 2020, but enforcement will not kick in til July 1, 2020. Enforcement may be a bit later if the OAL takes longer than 30 days to approve.

The full email is below.