The California Privacy Protection Agency has released a draft of its proposed regulations that would implement the California Consumer Privacy Act, but the draft only addresses a small number of the 22 different topics that the CPPA needs to address.
A copy of the draft of the regulations can be accessed by clicking here.
The CPPA has a board meeting scheduled for next week, at which point an updated timeline for the formal rulemaking process may be released. The CCPA is scheduled to go into effect on January 1, 2023.
Among the areas not covered in the first draft are how companies should handle the personal information or privacy requests of employees or individuals who interact with companies on a business-to-business level, and how companies should update their privacy policies about the retention of personal information.
The draft does detail how consumers should be allowed to make decisions regarding their privacy and data collected by companies, such as saying that any process must be “easy to understand” and prohibit using language that may be deemed to be manipulative. The proposed regulations would also change how consumers access and use websites subject to the law, such as offering opt-in and opt-out options to consumers regarding the use of cookies.
