11 articles on cppa — privacy laws, security frameworks, and regulatory compliance.
From 1 January 2027, businesses using automated decision-making technology for significant decisions about Californians must provide a pre-use notice,...
On 11 August CalPrivacy fined LocateSmarter $116,490 in its first action combining the CCPA and the Delete Act — in part because the broker demanded p...
California's privacy regulator has built a dedicated Audits Division and says to expect CCPA compliance audits in 2026 — including unannounced ones. H...
Under California's finalized CCPA regulations, a business's risk assessments must be certified by a member of executive management, and that named ind...
As of mid-2026, twenty US states have comprehensive privacy laws in effect — with Indiana, Kentucky, and Rhode Island the newest arrivals — and Congre...
California regulators settled with General Motors for $12.75 million over its OnStar program's unauthorized sale of detailed driving behavior data to ...
The California Privacy Protection Agency issued multiple enforcement decisions in Q1 2026 against well-known companies including Disney/ABC ($2.75M), ...
As of January 1, 2026, California businesses meeting CPRA thresholds must conduct annual, independent cybersecurity audits. Enforcement is already und...
California's CPPA risk assessment regulations took effect January 1, 2026 — making it the first state to require businesses to actually file their ass...
The California Delete Act's DROP platform opened to consumers on January 1, 2026. Data brokers now have until August 1, 2026 to begin processing delet...
The California Privacy Protection Agency's enforcement action against Ford reveals how a seemingly minor UX decision — requiring email confirmation fo...