About CalPrivacy

The California Privacy Protection Agency, known as CalPrivacy, was created in 2020 by Proposition 24. CalPrivacy’s role is to protect the privacy rights of California consumers. CalPrivacy implements and enforces California’s landmark privacy laws by:

  • Educating the public about their privacy rights and helping businesses understand their responsibilities under the California Consumer Privacy Act (CCPA) and the Delete Act.
  • Adopting regulations to implement and gain compliance with privacy laws.
  • Investigating, auditing, and imposing administrative penalties on businesses that do not comply with privacy laws when they collect, use, share, and sell consumers’ personal information.
  • Cooperating with other agencies that enforce privacy and data processing laws in California, other states, territories, and countries.
  • Providing technical assistance and advice to the Legislature on privacy-related legislation.

Plans and reports

2025 Annual Report
2024 Annual Report
 

2024-2027 CalPrivacy Strategic Plan
2023 State Leadership Accountability Act Report

CPPA Board

The California Privacy Protection Agency is governed by a five-member board of privacy experts and business leaders. The CPPA Board holds regular meetings in accordance with the Bagley-Keene Opening Meeting Act.

Visit our Events page to find more information about upcoming meetings or to access recordings and materials from past meetings.

Board decisions
Board motions
Board handbook

Jennifer M. Urban was appointed by California Governor Gavin Newsom in March 2021 to be the inaugural Chair of the California Privacy Protection Agency Board. Urban is a Clinical Professor of Law at the University of California, Berkeley School of Law, where she is Director of Policy Initiatives at the Samuelson Law, Technology & Public Policy Clinic. Prior to joining Berkeley Law, she founded and directed the USC Intellectual Property & Technology Law Clinic at the University of Southern California, Gould School of Law. Before that, she was the Samuelson Clinic’s first fellow and an attorney with the Venture Law Group in Silicon Valley. She holds a B.A. in biological science (concentration in neurobiology and behavior) from Cornell University, and a J.D. (with law and technology certificate) from Berkeley Law.
Jill Hamer was appointed by Governor Gavin Newsom in August 2025. She was the General Manager of Data Privacy, Logic20/20, from 2019 to 2022. She held multiple roles at Primitive Logic from 1990 to 2022, including Chief Executive Officer and Board Chair. Prior to that, she was the Attorney and General Counsel at the Law Offices of Jill P. Reber and Partner at Lieberman & Reber. Ms. Hamer is a United States Board Member of the Human Needs Project and a member of the International Organization of Privacy Professionals and Athena Alliance. She earned a Juris Doctor degree from the Georgetown University Law Center and a Bachelor of Arts degree in Criminal Justice and Political Science from the University of Maryland.
Drew Liebert was appointed by Senate President Pro Tempore Mike McGuire in April 2024. He is an attorney who served over two decades in various staff leadership positions in the California Legislature, most recently as Chief of Staff to the Senate Majority Leader and for 18 years as Chief Counsel to the Assembly Judiciary Committee, where he and his attorney staff advised state policymakers on many of the major technology–related measures considered by the California Legislature. Liebert was a CORO Foundation Fellow in Public Affairs and was named a “California Lawyer of the Year.” He is a graduate of UC Berkeley, a recipient of a Masters in Public Policy from the Claremont Graduate School, and a graduate of the UC Berkeley School of Law.
Alastair Mactaggart is the Founder of Californians for Consumer Privacy, a nationally–recognized consumer privacy advocacy group, and is responsible for creating the two strongest consumer privacy laws in the United States. From 2016–2018 he created and led a ballot measure which resulted in the passage of the California Consumer Privacy Act (CCPA), and in 2019-2020, Mr. Mactaggart authored and sponsored the California Privacy Rights Act, which was successfully passed through ballot initiative Proposition 24 and gave Californians among the most comprehensive privacy rights in the world. He has over 30 years of experience in management, real estate development, and nonprofit leadership, and has a B.A. and MBA from Harvard University.
Nicole Ozer was appointed by Assembly Speaker Robert Rivas in December 2025. She is the inaugural Executive Director of the Center for Constitutional Democracy at UC Law San Francisco. Previously, Ms. Ozer was the founding director of the Technology and Civil Liberties Program at the ACLU of Northern California where she defended and promoted rights in the modern digital world for more than 20 years. Ms. Ozer has also served as a Technology and Human Rights Fellow at the Harvard Kennedy School, a Visiting Researcher at the Berkeley Center for Law and Technology, and a Fellow at the Stanford Digital Civil Society Lab. She graduated with a J.D. and a certificate in law and technology from Berkeley Law and a B.A. magna cum laude in American Studies from Amherst College.

Leadership team

Tom Kemp is the Executive Director of the CalPrivacy. Before his role at the CalPrivacy, Tom was a Silicon Valley-based tech entrepreneur, co-founder, and CEO. Tom was a full-time volunteer on the 2020 campaign to pass the California Privacy Rights Act and has since advised on significant tech policy legislation across the country, including the Delete Act (SB 362), the AI Transparency Act (SB 942), and bills in Texas, Nebraska, Vermont, and Washington. He has been recognized for his policy contributions by both the California and Texas State Senates. Tom is the author of Containing Big Tech: How to Protect our Civil Rights, Economy, and Democracy. Tom holds bachelor’s degrees in computer science and history from the University of Michigan.
Tiffany Garcia is the Chief Deputy Director of CalPrivacy. Prior to joining CalPrivacy, Tiffany served for four years as Deputy Secretary overseeing Fiscal Policy and Administration for the Business, Consumer Services and Housing Agency. She previously served as a Principal Program Budget Analyst at the Department of Finance; as a budget analyst at the Department of Health Care Services; and as staff for the American Recovery & Reinvestment Act Task Force in the Office of the Governor. She graduated with a bachelor’s degree in Sociology from California State University, Sacramento.
Deputy Director of Administration – Vacant

 

 

Lisa Kim is the Senior Privacy Counsel and Advisor at CalPrivacy. She previously served as Deputy Attorney General at the Office of the California Attorney General, where she enforced state and federal privacy laws and drafted the regulations first implementing the California Consumer Privacy Act. Lisa received her B.A. magna cum laude from the University of California, Los Angeles and her J.D. at UC Berkeley’s School of Law.
Phil Laird is the General Counsel at CalPrivacy. He previously served as the Deputy General Counsel at the California Business, Consumer Services, and Housing Agency, where he provided legal advice and guidance to eleven state departments and boards. Prior to that, he served as Staff Counsel at the California Horse Racing Board, working on rulemaking and enforcement matters, and also as a Special Deputy Attorney General at the California Department of Justice, advising on education law and policy. He holds a B.A. from UC Santa Cruz and a J.D. from the University of San Francisco.
Michael S. Macko is the Deputy Director of Enforcement at CalPrivacy. He has nearly two decades of litigation and investigative experience both in industry and the public sector, including as in–house counsel handling government and regulatory litigation, and as Assistant U.S. Attorney and Trial Attorney at the U.S. Department of Justice and U.S. Securities and Exchange Commission. He started his career as a litigator at a large law firm and clerked for judges on the U.S. Court of Appeals and U.S. District Court. A former adjunct professor of law, he holds a B.A. from Penn State and a J.D. from the University of Pennsylvania Law School.
Maureen Mahoney is the Deputy Director of Policy and Legislation at the CalPrivacy. She was previously at Consumer Reports, where she worked in the advocacy division for nearly a decade on a number of issues, including privacy, data security, right to repair, telemarketing, and credit reporting. She received a B.A. in History from the University of Chicago and an M.A. and Ph.D. in History from the University of Wisconsin–Madison.
Sabrina Boyson Ross is the Chief Privacy Auditor at CalPrivacy. She has extensive experience in privacy, technology, and regulatory compliance. She most recently served as Director of Public Policy at Meta. Previously, she held senior privacy and policy leadership roles at Uber, Apple, and Nauto. She began her career as a privacy and data security attorney in private practice. She holds a B.A. from Grinnell College and a J.D. from the University of California, Berkeley School of Law.
Megan White is the Deputy Director of Public and External Affairs at CalPrivacy. She was previously the Communications Manager at the California Office of Data and Innovation and the Information Officer at the California Public Employees’ Retirement System. Prior to state service, Megan worked at the Sacramento Business Journal and Katz & Associates, a public relations firm. She has her B.A. from Santa Clara University and a Master’s in Design, Business, and Technology from the University of Southern California.

About

Businesses

Website Accessibility Certification