The CPPA Audits Division Arrives: What California's First CCPA Compliance Audits Mean in 2026
California's privacy regulator has built a dedicated Audits Division and says to expect CCPA compliance audits in 2026 — including unannounced ones. H...
CPPA
9 articles on CPPA — privacy laws, security frameworks, and regulatory compliance.
Your Name on the Line: California's CCPA Rules Put Executives Personally on the Hook for Risk Assessments
Under California's finalized CCPA regulations, a business's risk assessments must be certified by a member of executive management, and that named ind...
Twenty States, One Patchwork: The 2026 State Privacy Map and Why Enforcement Just Got Real
As of mid-2026, twenty US states have comprehensive privacy laws in effect — with Indiana, Kentucky, and Rhode Island the newest arrivals — and Congre...
GM's $12.75 Million CCPA Settlement: California's Record Penalty and the First Data Minimization Enforcement Action
California regulators settled with General Motors for $12.75 million over its OnStar program's unauthorized sale of detailed driving behavior data to ...
California's CPPA Is Fining Real Companies Now: Lessons from Disney, Ford, Honda, and Tractor Supply
The California Privacy Protection Agency issued multiple enforcement decisions in Q1 2026 against well-known companies including Disney/ABC ($2.75M), ...
The CPRA Cybersecurity Audit Mandate Is Now Active: What California Businesses Must Do in 2026
As of January 1, 2026, California businesses meeting CPRA thresholds must conduct annual, independent cybersecurity audits. Enforcement is already und...
California's Privacy Risk Assessment Rules Are Live. The 2028 Deadline Isn't the Starting Gun.
California's CPPA risk assessment regulations took effect January 1, 2026 — making it the first state to require businesses to actually file their ass...
California's Delete Act Is Live: What Data Brokers Must Do Before August 1, 2026
The California Delete Act's DROP platform opened to consumers on January 1, 2026. Data brokers now have until August 1, 2026 to begin processing delet...
Ford Motor Company Fined $375,703 by California Privacy Agency for Blocking Consumer Opt-Out Rights
The California Privacy Protection Agency's enforcement action against Ford reveals how a seemingly minor UX decision — requiring email confirmation fo...