Becerra Issues Final Rules Under Landmark California Privacy Law

California Attorney General Xavier Becerra has issued a final set of rules for compliance with the California Consumer Privacy Act, six weeks after he gained the authority to enforce the law.

California’s Office of Administrative Law approved the regulations Aug. 14 after Becerra’s office made changes that it characterized as non-substantive. Becerra (D) had submitted the rules to the office for final approval June 1, in advance of his enforcement authority taking effect July 1. His office had issued three drafts of the rules since last October.

“With these rules finalized, California breaks ground and leads the nation to protect and advance data privacy,” Becerra said in a statement.

The rules outline how companies must comply with the broad privacy law, which gives California consumers the right to ask companies what personal data they hold about them, request that it be deleted, and opt out of sharing that information with third parties.

Becerra had rejected calls from businesses to delay enforcement until the regulations were final -- or even longer -- due to the complexity of the law and regulations. His office hasn’t acted publicly to enforce the new law, but Becerra had said his office would begin its efforts July 1.