Oct 102019

California Attorney General Releases Proposed CCPA Regulations

Data Matters Contributors
, , , ,

Earlier today, the California Attorney General ended months of anticipation by releasing the text of his proposed California Consumer Privacy Act (CCPA) regulations.  Comments on the proposed regulations are due by December 6, 2019, and the Attorney General’s office will hold public hearings on the regulations on December 2 (Sacramento), December 3 (Los Angeles), December 4 (San Francisco), and December 5 (Fresno).

The CCPA requires the Attorney General to issue regulations on a number of topics, and, from the moment the bill was first enacted, many commentators hoped that the regulations would provide important guidance on the challenging issues and ambiguities present in the hastily-drafted Act.  Given this level of attention, it is thus unsurprising that the Attorney General only released his proposed regulations after a lengthy comment period during which he solicited views from affected parties and held numerous hearings all over the State.

As expected, the regulations address numerous topics of interest to businesses in the midst of CCPA compliance efforts, providing guidance on: what content must appear in privacy policies, how businesses should respond to data subject requests, what verification standards businesses should use, how to treat household requests, and many, many other key topics.  While Data Matters will have a detailed analysis of these new regulations in coming days, we are putting out this post now to make sure privacy watchers are aware of this important development.

Data Matters Contributors

sidleyprivacyblog@sidley.com

You might also like
UK’s New Pro-innovation Approach to Regulating Digital Technologies

On 15 March 2023, the UK Government published, alongside its Spring Budget, a report on the Pro-innovation Regulation of Technologies Review (the “Report”). The Report was led by the government’s Chief Scientific Advisor and National Technology Officer, Sir Patrick Vallance, who was tasked with “bringing together the best minds to advise how the UK can better regulate emerging technologies, enabling their rapid and safe introduction.” In response, the UK Government has accepted all of the Report’s recommendations, and set out some next steps for their implementation.

U.S. Employers Need to Reconsider Use of Confidentiality and Nondisparagement Provisions in Light of New NLRB Decision

Employers frequently seek to include confidentiality and nondisparagement provisions in severance agreements provided to departing employees. Last week, the U.S. National Labor Relations Board (NLRB or Board) significantly altered the legal landscape governing such provisions, making it much more difficult for unionized and nonunionized employers alike to use them for nonsupervisory employees without running afoul of the National Labor Relations Act (NLRA). The decision is likely to be appealed, and we will issue updates as they become appropriate. In the interim, however, it is critically important for employers to understand the implications of the decision (see below) and to adjust their use of these provisions to limit their risk.

Substantial Changes to Hong Kong’s Privacy Laws Coming

In a briefing to the Legislative Council (Hong Kong’s legislative body) on February 20, 2023, the Privacy Commissioner (“the Commissioner”) announced that substantive amendments to the Personal Data (Privacy) Ordinance (“PDPO”) will take place.