The California Consumer Privacy Act (CCPA) imposes requirements on regulated businesses relating to conducting cybersecurity audits, risk assessments and use of automated decision-making technology. In late 2023, the California Privacy Protection Agency posted discussion drafts of regulations to guide its anticipated rulemaking on these topics. In this session, we will discuss the current state of the CCPAs’ compliance requirements relating to risk assessments, cybersecurity audits and automated decision-making, along with some general best practices Cooley recommends that regulated businesses consider when addressing these topics.
