California Consumer Privacy Act (CCPA) Regulatory Updates

The California Office of Administrative Law approved revisions to the CCPA Regulations, which will take effect on January 1, 2026. Revisions to the CCPA’s existing obligations will require businesses to assess whether their current compliance programs will need updates, including with respect to the processing of sensitive personal information (now including personal information of consumers under the age of 16), and the handling of consumers’ rights requests. The revisions will also require businesses to evaluate whether their current interfaces for websites, mobile apps, connected devices, and augmented/virtual reality devices meet the updated transparency requirements. New obligations introduced in the revised regulations related to automated decision-making technology, cybersecurity audits, and risk assessments will take effect in 2027.