California Privacy Agency Starts Path to AI, Cybersecurity Rules

The California Privacy Protection Agency on Friday began the process of creating new regulations addressing the use of artificial intelligence in data collection and businesses’ cybersecurity assessments, among other things.

The agency introduced proposed questions and subject areas that will be put to the public sometime in 2023. Questions will be finalized and approved at a later meeting. After that comment period, regulators will begin discussing what the regulatory framework around audits, risk assessments, and automated decision-making should look like.

Sample questions indicate some of the directions the agency will take or at least consider when crafting the new ...