United States of America: Opened consultation on CPPA proposed risk assessment regulations

On 22 November 2024, the California Privacy Protection Agency (CPPA) opened the public consultation on proposed regulations on California Consumer Privacy Act (CCPA) updates, cybersecurity audits, risk assessments, automated decision-making technology (ADMT), and insurance companies until 14 January 2025. The proposed regulations introduce mandatory risk assessments for data processing activities involving sensitive or large-scale personal information. Businesses will be required to identify and mitigate privacy risks, document safeguards, and ensure the quality of data used in automated decision-making.