United States of America: CPPA Cybersecurity Audit Regulations
Progress
Scope
Timeline of events
California Privacy Protection Agency published updated draft amendments to CCPA regulations including proposed regulations on cybersecurity audits
On 28 March 2025, the California Privacy Protection Agency (CPPA) published its revised draft regulations on cybersecurity audits before its Board meeting. This follows a public consultation that closed on 14 January 2025. The updates to the regulat…
SourceClosed consultation on CPPA proposed regulations on cybersecurity audits
On 14 January 2025, the California Privacy Protection Agency (CPPA) closes the public consultation on proposed regulations on California Consumer Privacy Act (CCPA) updates, cybersecurity audits, risk assessments, automated decision-making technolog…
SourceOpened consultation on CPPA proposed regulations on cybersecurity audits
On 22 November 2024, the California Privacy Protection Agency (CPPA) opened the public consultation on proposed regulations on California Consumer Privacy Act (CCPA) updates, cybersecurity audits, risk assessments, automated decision-making technolo…
SourcePublished draft Cybersecurity Audit Regulations
On 28 August 2023, the California Privacy Protection Agency (CPPA) released materials ahead of its 8 September 2023 board meeting, including draft Cybersecurity Audit Regulations. The CPPA clarified that formal rulemaking processes for cybersecurity…
Source