Skip to content
Legislations.
CACaliforniaCaliforniaProposalProposal

CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits

Regulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.

Where it stands

AdoptedIntroducedCommitteeFloorLawAdopted

Regulations took effectJan 18 months ago

Body
California Privacy Protection Agency
Session
2025
In effect since
Jan 18 months ago
PrivacyAICyber
Official page

Timeline

  1. Jan 1 8 months ago

    Regulations took effect

  2. Sep 22, 2025 1 year ago

    Approved by the Office of Administrative Law and filed with the Secretary of State

  3. Jul 24, 2025 1 year ago

    Adopted by the California Privacy Protection Agency Board