The California Privacy Protection Agency (CPPA, sometimes styled CalPrivacy) is the state agency responsible for implementing and enforcing the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Its rulemaking includes the CCPA regulations covering automated decision-making technology, risk assessments, and cybersecurity audits.
First sectoral audit (July 2026)
On July 21, 2026, the CPPA launched its first sectoral CCPA compliance audit, targeting gig-economy platforms over the geolocation, biometric, and performance data feeding algorithmic dispatch, ratings, and pay decisions, and testing whether workers' access requests are fulfilled within the 45-day statutory window (Source: privacy.ca.gov; hunton.com).
Relationships
- related: California CCPA/CPRA Regulations — Automated Decision-Making Technology (ADMT) — the rules it enforces.
- regulated-by (inverse): gig-economy platforms; see Transportation — AI Deployment, AI Labor Disruption.
- related: State-Level AI Regulation.