(Source: CDF Labor Law, by Dalia Z. Khatib – December 6, 2023)
On Friday, December 8, 2024, the California Privacy Protection Agency met to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal rulemaking process on many of the regulations, the current drafts are meant to help facilitate discussion.
The draft California Consumer Privacy Act (CCPA) regulations reveal important expansions, if implemented, and may include things like:
- Expanding the definition of sensitive personal information to include persons under 16 years of age
- Allowing consumers to request information about the consumer that a company shares
- Creating an annual adjustment for monetary thresholds, such as the revenue threshold and penalty requirement, based on the consumer pricing index
- Requiring businesses to ensure that information remains deleted, deidentified, or aggregated – or risk non-compliance with a request to delete
While some of the proposed regulations include helpful illustrative examples, many do not. Other proposed regulations relate to cybersecurity audits, risk assessments, and automated decision-making processes.
The Agency will hold a closed session to obtain counsel’s guidance about the CalChamber case. The Appeal seeks to overturn the trial court’s decision to delay enforcement. There is also a pending petition for writ of mandate.
If you have questions about the development of these proposed regulations, and what their outcomes could mean for your business, contact our experts here at CalWorkSafety & HR. Our team is experienced in all aspects of California workplace regulations and can help your business stay compliant. Contact us at https://www.calworksafety.com/contact-us or call (949) 413-6821.