On 3 March 2022, the Consumer Privacy Act (SB 227) was adopted and sent to the Governor for signing. Besides new rights for data subjects, the Act requires companies to introduce system security standards to ensure cybersecurity. The Act would empower the Division of Consumer Protection to open investigations into complaints regarding data processing and the Attorney General to issue penalties for noncompliance.
Original source