In relation to the enactment of the California Privacy Rights Act (CPRA), the California Privacy Protection Agency (CPPA) was created and delegated significant regulatory authority, a part of which includes cybersecurity – an authority now being touted in prospective circles of regulatory drafts.
The CPPA has taken on the responsibility of performing cybersecurity audits on an annual basis. In this context, on September 8, 2023, there has been significant movement regarding regulations for these audits. The CPPA has reportedly been considering a draft set of regulations intended to establish concrete rules for the execution of the said cybersecurity audits.
Corporate legal professionals and law firms across the world need to keep an eye on these evolving regulations, as they will set the benchmark for cybersecurity compliance. The pursuit and establishment of cybersecurity regulations is set to create impacts in data privacy laws and their implementation on a global scale.
For further details, you may refer to coverage by Jackson Lewis P.C. on the matter.