California Privacy Agency Adopts Automated Tech, Cyber Rules (1)

The California Privacy Protection Agency board greenlit new rules for how companies use automated technologies, mandating new cybersecurity audits and privacy assessments.

The final rulemaking package, approved unanimously by the five-member board Thursday, is a pared down version of the agency’s earlier efforts following strong industry pushback, sparking criticism from consumer and labor advocacy groups and California residents.

The agency decided not to make further significant changes to the rulemaking after reviewing feedback received during its final comment period which ended on June 2, prompting backlash Thursday from both industry groups and California residents.

“The CPPA has not adequately examined ...