United States of America: California Privacy Protection Agency published updated draft amendments to CCPA regulations including proposed automated decision making regulations

On 28 March 2025, the California Privacy Protection Agency (CPPA) published its updated draft regulations on automated decision-making technology (ADMT) before its Board meeting. This followed the conclusion of the 45-day public consultation period on 14 January 2025. The revised text clarifies the scope and definition of ADMT, covering systems that make or significantly assist decisions with legal or similarly significant effects on consumers. The proposed compliance deadline of 1 January 2027 is reaffirmed. The updated draft incorporates procedural obligations for the management of consumer requests to access or opt out of ADMT. In particular, it includes a provision requiring companies to provide, upon request, information that will allow consumers to determine whether the personal information used in ADMT is consistent with their expectations. Additional requirements include clear and contextual notices and mechanisms for consumers to exercise their rights, particularly in the case of opt-out preference signals.