On Friday, February 9, as the country collectively packed up and prepared to head home for Super Bowl weekend, the Third Appellate District of the California Appellate Court issued an Order granting the California Privacy Protection Agency (the Agency) the ability to immediately enforce regulations implementing the California Privacy Rights Act (CPRA), which were finalized in March 2023. This vacated a July 2023 court decision staying enforcement of the regulations until March 29, 2024.
In a public statement also released on February 9, the Agency’s Deputy Director of Enforcement Michael Macko stated that the “enforcement team stands ready to take it from here,” and it is expected that enforcement of the regulations will begin promptly. Additionally, the Order paves the way for enforcement after finalization of the proposed regulations governing cybersecurity audits, risk assessments, and automated decisionmaking technology.
