If you have been relying on last year’s court order staying the ability of the California Privacy Protection Agency (CPPA) to enforce regulations promulgated under the California Privacy Rights Act (CPRA) to also stay your own CPRA compliance program — time to ramp back up.
In a major win for the CPPA, California’s Third District Court of Appeals vacated the lower court decision and held that the CPPA’s authority to enforce its amended regulations should have been effective on July 1, 2023. Although the CPRA intended for regulations to be final by July 1, 2022 – giving businesses a year to make operational changes – the CPPA did not issue final regulations on 7 out of 15 statutory areas until the end of March, 2023.
