California has finalized regulations on automated decision-making technology (ADMT), strengthening consumer protections under state privacy law. The rules require businesses to disclose when AI is used in significant decisions, offer opt-out rights, and provide…
Posts by Category: California
California’s Risk Assessment Requirement Under the CCPA: What It Is, When It Applies, and How to Approach It
California’s new risk assessment requirement under the CCPA, effective in 2026, mandates that businesses evaluate high-risk data processing before implementation. Covered activities include selling data, processing sensitive information, and using automated…
What You Should Know About CCPA Compliance After the California Attorney General’s 2024 Investigative Sweep
The California Consumer Privacy Act (CCPA), a law giving California residents greater control over their personal data. There are key consumer rights, including the ability to access, delete, and opt out of the sale of their information. Businesses must comply with…
Groundbreaking Lawsuit Tests Whether AI Hiring Tools Trigger FCRA Compliance
A proposed class action lawsuit filed in California challenges whether AI-powered hiring tools must comply with the Fair Credit Reporting Act (FCRA). The case targets Eightfold AI, alleging its software collects extensive personal data — such as LinkedIn profiles,…
Thousands Brace for Fallout from Unreported LA County Criminal Convictions
A decades-long recordkeeping error in Los Angeles County left hundreds of thousands of criminal case outcomes unreported to California’s Department of Justice. About 464,000 arrest reports from 1980–2023 — including roughly 147,000 felony and 233,000 misdemeanor…
Governor Newsom Announces First-In-The-Nation Privacy Tool Allowing Californians to Block the Sale of Their Data
California Governor Gavin Newsom and the California Privacy Protection Agency launched the Delete Request andOpt-out Platform (DROP), a first-of-its-kind privacy tool that lets California residents send a single request to registereddata brokers to delete their…
New California Laws 2026: Part 28 – Background Checks
California’s 2026 legislative session produced several new laws, including measures on background checks, laborstandards, and AI chatbots. Part 28 of the New California Laws 2026 series identifies chapters such as SB-160 onbackground checks and additional bills…
CPPA Acts to Enforce Against Data Brokers’ Failure to Register
The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to registerunder the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multipleactions, including fines and orders…
California 2025 Legislative Wrap-Up: More Privacy and First-Of-Its Kind AI Laws Adopted
In 2025, California passed several new privacy and AI laws, reinforcing its leadership in data protection and technologyregulation. Lawmakers enacted privacy measures such as universal browser opt-out signals, expanded children’s andlocation data protections, and…
Time for HR Professionals and In-House Employment Counsel to Add HR Data Privacy Risk Assessments to Their Repertoire
Effective January 1, 2026, California employers with over $25 million in revenue must conduct privacy risk assessments before processing HR Data that presents significant privacy risks. Triggers include handling sensitive information, using automated decision-making…






