Ever since the California Consumer Privacy Act (CCPA) was enacted, businesses have eagerly anticipated the Attorney General’s regulations that the Act required.  After public hearings, two rounds of modifications and further public comment, the Office of Administrative Law (OAL) approved the Attorney General’s regulations on August 14, 2020.  OAL’s final approval required minor revisions to make the regulations more consistent with terminology in the Act and several regulations were ultimately withdrawn by the Attorney General.  The withdrawn sections included 999.305(a)(5), 999.306(b)(2), 999.315(c), and 999.326(c), which contained (among others) the requirement that businesses obtain express consent from consumers before using personal information for a materially different purpose.  It will be interesting to see if the Attorney General pursues these withdrawn provisions any further as their removal could be considered rather business-friendly.

For the full text of the final regulations and other CCPA regulatory information, please visit the Attorney General’s website dedicated to the CCPA regulations here.

Legal Disclaimer: