California Consumer Privacy Act Regulations (March 2023)

On July 8, 2022, the California Privacy Protection Agency commenced the formal rulemaking process to adopt regulations to implement the Consumer Privacy Rights Act of 2020 (CPRA). The proposed regulations: (1) update existing CCPA regulations to harmonize them with CPRA amendments to the CCPA; (2) operationalize new rights and concepts introduced by the CPRA to provide clarity and specificity to implement the law; and (3) reorganize and consolidate requirements set forth in the law to make the regulations easier to follow and understand.

Notice Register Publication Date: July 8, 2022

Status of the Proposal: The rulemaking is complete. On March 29, 2023, the Office of Administrative Law approved the California Privacy Protection Agency’s regulations and filed them with the Secretary of State. The regulations became effective on March 29, 2023.

Rulemaking activities

November 3, 2022 – Public Notice of Modifications to Proposed Regulations and Additional Materials Relied Upon

Preliminary rulemaking activities

March 29-30, 2022 - Pre-rulemaking Informational Sessions

The Agency held a set of instructive informational sessions on Tuesday, March 29, 2022 and Wednesday, March 30, 2022 to inform the Agency Board, Agency staff, and the public on topics relevant to the upcoming rulemaking.