Rulemaking Begins on Consumer Privacy Rights Act

Board room

The California Privacy Protection Agency (CPPA) has begun the formal rulemaking process to adopt proposed regulations implementing the Consumer Privacy Rights Act of 2020 (CPRA), a law amending and building on the California Consumer Privacy Act (CCPA).

The proposed regulations:

  • 1) Update existing CCPA regulations to harmonize them with CPRA amendments to the CCPA.
  • 2) Operationalize new rights and concepts introduced by the CPRA to provide clarity and specificity to implement the law.
  • 3) Reorganize and consolidate requirements set forth in the law to make the regulations easier to follow and understand.

The California Credit Union League is reviewing the proposed regulations and will be providing an analysis and an outline of concerns with the proposed regulations soon. 

For now, a copy of the proposed regulations and supporting documents can be found here.

If you wish to submit written comments on the proposed regulations, you must submit them by Aug. 23, 2022 at 5 p.m. (Pacific). Comments can be submitted by email to or by mail to the California Privacy Protection Agency, Attn: Brian Soublet, 2101 Arena Blvd., Sacramento, CA 95834. Please note that any information provided is subject to public disclosure.

In addition to written comments, there will be public hearings to allow interested parties an opportunity to comment on Aug. 24 and 25, 2022 at 9 a.m. (Pacific). You can RSVP via the web link above.

More information is available here.

If you have any questions, please contact Lisa Quaranta, vice president of regulatory advocacy for the League.

Pin It