The California Consumer Privacy Act (CCPA) imposes requirements on regulated business relating to cybersecurity audits, risk assessments and automated decision-making technology. The California Privacy Protection Agency has published drafts of regulations regarding these topics. In this session, Cooley cyber/data/privacy partner David Navetta, special counsel Kristopher Kleiner, and associate Christian Lee will discuss the current state of the draft regulations and best practices for businesses to consider with respect to these topics.