Skip to main content
Menu Icon
Close

InfoBytes Blog

Financial Services Law Insights and Observations

California clarifies CPRA rulemaking authority timing

Privacy/Cyber Risk & Data Security State Issues State Legislation CPRA CPPA CCPA Agency Rule-Making & Guidance

Privacy, Cyber Risk & Data Security

On October 5, the California governor signed AB 694. The bill clarifies that the California Privacy Protection Agency (which was given “full administrative power, authority, and jurisdiction to implement and enforce the [California Consumer Privacy Act]”) would assume responsibility for rulemaking “on or after the later of July 1, 2021, or within six months of the agency providing the Attorney General with notice that it is prepared to assume rulemaking.” A previously covered by InfoBytes, last month the CPPA formally called on stakeholders to provide preliminary comments on proposed Consumer Privacy Rights Act rulemaking. However, the CPPA noted that the invitation for comments is not a proposed rulemaking action and stated that the public will have additional opportunities to provide comments on proposed regulations or modifications when it proceeds with a notice of proposed rulemaking action.