California Privacy Protection Agency

EPIC Commends CPPA on Strong Proposed Regulations on Cybersecurity, Risk Assessments, and ADMT

February 20, 2025

The comments commend the Agency for taking steps to protect consumers' privacy and suggest several ways to strengthen the regulations.

• AI Policy

• Artificial Intelligence and Human Rights

• Consumer Privacy

• Cybersecurity

• Data Minimization

• Data Security

• Privacy Laws

• U.S. State Privacy Laws

• Updates

Comments to the CPPA on Proposed Regulations Regarding Cybersecurity, Risk Assessments, and ADMTs

February 20, 2025

We commend the Agency for taking steps to protect consumers from the significant privacy harms caused by the use of automated decisionmaking technologies and the processing of personal data without adequate assessment and mitigation of the resulting privacy and security risks.

• AI Policy

• Artificial Intelligence and Human Rights

• Consumer Privacy

• Data Minimization

• Comments

California Rolls Out New Privacy Resource

December 23, 2024

The California Privacy Protection Agency (CPPA) has released a new website with privacy resources for Californians.

• Consumer Privacy

• Privacy Laws

• U.S. State Privacy Laws

• Updates

EPIC Backs CPPA’s Efforts to Strengthen Data Broker Registry

August 20, 2024

• Consumer Privacy

• Data Brokers

• Data Protection

• Enforcement of Privacy Laws

• Updates

Comments of the Electronic Privacy Information Center to the California Privacy Protection Agency on Proposed Rulemaking Regarding Data Broker Registration Regulations

August 20, 2024

EPIC supports the Agency’s efforts to enhance its data broker registry and rein in the privacy harms caused by the industry. EPIC supports the proposed regulatory clarifications and definitions and urges the Agency to require that data brokers supply an individual point of contact to be published on the registry.

• Consumer Privacy

• Data Brokers

• Data Protection

• Enforcement of Privacy Laws

• Comments

California Privacy Agency Releases Draft Rules for Automated Decision-Making Technology, Including Opt-Out for Behavioral Ads

November 28, 2023

As momentum to regulate artificial intelligence (AI) continues to build on the federal level, yesterday the California Privacy Protection Agency (CPPA) published draft regulations for automated decision-making technology, which includes machine learning and AI.

• Artificial Intelligence and Human Rights

• Commercial AI Use

• Privacy Laws

• U.S. State Privacy Laws

• Updates

Comments Of The Electronic Privacy Information Center, Center For Digital Democracy, and Consumer Federation Of America, to the California Privacy Protection Agency

March 31, 2023

The Electronic Privacy Information Center, Center for Digital Democracy, and Consumer Federation of America submit these comments in response to the California Privacy Protection Agency’s February 2023 invitation for public input concerning the agency’s development of further regulations under the California Consumer Protection Act of 2018 as amended by the California Privacy Rights Act of 2020.

• AI Policy

• Artificial Intelligence and Human Rights

• Cybersecurity

• Data Security

• Privacy Laws

• U.S. State Privacy Laws

• APA Comments

EPIC, Coalition Submit Comments to California Privacy Agency

March 31, 2023

submitted comments to the California Privacy Protection Agency to recommend strong draft regulations implementing key provisions of the California Consumer Privacy Act.

• Updates

EPIC Reply Comments to the California Privacy Protection Agency

November 21, 2022

• Consumer Privacy

• Data Brokers

• Data Minimization

• Privacy Laws

• U.S. State Privacy Laws

• Comments