On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal rulemaking process on many of the regulations, the current drafts are meant to help facilitate discussion.
The draft California Consumer Privacy Act (CCPA) regulations reveal important expansions, if implemented. For example:
- expanding the definition of sensitive personal information to include persons under 16 years of age;
- allowing consumers to request information about the consumer that a company shares;
- creating an annual adjustment for monetary thresholds, such as the revenue threshold and penalty requirement, based on the consumer pricing index; and
- requiring businesses to ensure that information remains deleted, deidentified, or aggregated – or risk non-compliance with a request to delete.
