At the California Privacy Protection Agency (CPPA) Board meeting on June 8, 2022, the board voted to begin the rulemaking process. The Board previously released a 66-page draft of regulations, that are intended to implement and interpret the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). While the draft redline regulations addressed topics such as implementing “easy to understand” language for consumer CCPA requests, the draft does not address all of the 22 regulatory topics required under the CPRA. For example, the draft does not cover the opt-in/opt-out of automated decision-making technology.

The next steps are for the board to file a Notice of Proposed Rulemaking Action, commencing the formal rulemaking process. The notice will be posted on the agency’s website and published in the California Regulatory Notice Register. Once filing opens a public comment period of at least 45 days will start, during which stakeholders and interested parties can submit written comments. The CPPA will also schedule a public hearing on the regulations.