During its September 23, 2022 board meeting, the California Privacy Protection Agency (CPPA) provided an update on the status of the ongoing California Privacy Rights Act (CPRA) rulemaking.  Since the closure of the required 45-day comment period, the agency staff have been reviewing the written and oral comments submitted by the public.  The agency will be promulgating revised regulations, which will be drafted by the staff and presented to the Board.  These revisions will be followed by an additional public comment period of 15 to 45 days depending on the scope of the revisions.

The CPPA Rulemaking Process Subcommittee also proposed a process for the Board’s review of and vote on the rules, including separate presentations by staff on (1) provisions that are part of a consent agenda (which would group non-controversial revisions to the draft rules) and (2) provisions outside of the consent agenda.  Deliberation and a vote would follow each presentation, with the assumption that only the provisions outside the consent agenda would require individual debate.  The Subcommittee suggested that deliberations may require multiple public Board meetings over several days, perhaps with breaks for staff to work on revisions or Board members to review resources.  While Board members would have the authority to draft and propose specific amendments, the Subcommittee recommended that Board members rely on staff for drafting assistance.  The proposed process prompted substantial discussion among the Board members.  Board members raised concerns including: the time commitment and burden for the Board, public, and staff; compliance with the notice requirements of the Bagley-Keene Open Meeting Act; and the role of staff, as compared to the Board.  The timing of the proposed meetings also remained unclear at the conclusion of the Board meeting, and one Board member suggested that the impact of the delayed regulations on enforcement should be docketed for discussion in a future Board meeting.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Lindsey Tonsager Lindsey Tonsager

Lindsey Tonsager helps national and multinational clients in a broad range of industries anticipate and effectively evaluate legal and reputational risks under federal and state data privacy and communications laws.

In addition to assisting clients engage strategically with the Federal Trade Commission, the…

Lindsey Tonsager helps national and multinational clients in a broad range of industries anticipate and effectively evaluate legal and reputational risks under federal and state data privacy and communications laws.

In addition to assisting clients engage strategically with the Federal Trade Commission, the U.S. Congress, and other federal and state regulators on a proactive basis, she has experience helping clients respond to informal investigations and enforcement actions, including by self-regulatory bodies such as the Digital Advertising Alliance and Children’s Advertising Review Unit.

Ms. Tonsager’s practice focuses on helping clients launch new products and services that implicate the laws governing the use of endorsements and testimonials in advertising and social media, the collection of personal information from children and students online, behavioral advertising, e-mail marketing, artificial intelligence the processing of “big data” in the Internet of Things, spectrum policy, online accessibility, compulsory copyright licensing, telecommunications and new technologies.

Ms. Tonsager also conducts privacy and data security diligence in complex corporate transactions and negotiates agreements with third-party service providers to ensure that robust protections are in place to avoid unauthorized access, use, or disclosure of customer data and other types of confidential information. She regularly assists clients in developing clear privacy disclosures and policies―including website and mobile app disclosures, terms of use, and internal social media and privacy-by-design programs.

Photo of Sarah Parker Sarah Parker

Sarah Parker is an associate in the firm’s Washington Office. Her practice focuses on privacy, advertising, and consumer protection regulatory matters and government investigations.

Sarah also maintains an active pro bono practice, with a focus on criminal justice and civil rights litigation