United States of America: Opened consultation on CPPA proposed regulations on cybersecurity audits

On 22 November 2024, the California Privacy Protection Agency (CPPA) opened the public consultation on proposed regulations on California Consumer Privacy Act (CCPA) updates, cybersecurity audits, risk assessments, automated decision-making technology (ADMT), and insurance companies until 14 January 2025. Businesses meeting defined thresholds will be mandated to conduct annual cybersecurity audits, including evaluations of encryption, multifactor authentication, and vulnerability management protocols.