Cyber, Privacy, and Technology Report
Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed.
View previous issues and sign up to receive future newsletters by email here.
State Actions:
- California Regulatory Activity Continues to Heat Up: August was an active month for California regulators, who issued draft regulations, announced an enforcement probe and launched an online consumer complaint portal:
- Cybersecurity Audits & Risk Assessment Draft Rulemaking: In advance of its Sept. 8 Board meeting, the California Privacy Protection Agency (CPPA) issued draft regulations on Risk Assessments and Cybersecurity Audits. The drafts expressly state that they are intended “to facilitate Board discussion and public participation” and are “subject to change.” Nonetheless, the drafts provided insight into how the Agency will address audits and assessments. For example, the Risk Assessment draft proposal requires businesses to conduct risk assessments where processing of consumer personal information “presents a significant risk to consumer privacy,” and identifies seven…
