Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

favicon.ico

favicon-16x16.png

favicon-32x32.png

apple-touch-icon.png

MoFo Favicons

Terms / Notices

Cookies

Privacy Policy

Attorney Advertising

Secure Login

Alumni

  Facebook

MoFo Facebook

  Linkedin

MoFo LinkedIN

Twitter

MoFo Twitter

YouTube

MoFo Youtube

Morrison Foerster - Footer

You have not solved the recaptcha challenge yet or session expired, try again.

Disclaimer

Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Culture

Offices

Careers

Stay Connected

The implementing regulations under the California Consumer Privacy Act of 2018 (CCPA) are one step closer to taking effect, following California Attorney General (AG) Xavier Becerra’s submission of final proposed regulations to the California Office of Administrative Law (OAL) for its review and approval.

One Step Closer: California AG Submits Final Proposed CCPA Regulations for Approval and Requests Expedited Review

About Morrison Forester

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

The implementing regulations under the California Consumer Privacy Act of 2018 (CCPA) are one step closer to taking effect, following California Attorney General (AG) Xavier Becerra’s submission of <a target="_blank" href="https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/oal-sub-final-text-of-regs.pdf">final proposed regulations</a> to the California Office of Administrative Law (OAL) for its review and approval. The final proposed regulations are substantively unchanged from the second modified draft regulations that the AG’s office issued on March 11, 2020 (which our team summarized in a previous <a href="/resources/insights/200312-california-ag-2nd-modified-ccpa-regulations.html">client alert</a>).Consistent with the CCPA’s requirement that the AG adopt initial regulations by July 1, 2020, as well as AG Becerra’s public commitment to begin enforcing the CCPA on July 1, 2020, AG Becerra has <a target="_blank" href="https://www.oag.ca.gov/sites/all/files/agweb/pdfs/privacy/oal-sub-written-justification-req.pdf">requested</a> an expedited process:<ol class="li-margin"><li>Request for OAL to conduct an expedited review of the proposed regulations. By statute, OAL has 30 business days to review proposed regulations for compliance with the California Administrative Procedure Act. An executive order, issued in response to the COVID-19 pandemic, extended this period by an additional 60 calendar days. However, AG Becerra has requested that OAL complete its “review within 30 business days, given the statutory mandate” to promulgate regulations by July 1, 2020.</li><li>A Request for the regulations to take effect when filed with the California Secretary of State. Once approved by OAL, final regulations are filed with the Secretary of State. Generally, regulations become effective on one of four quarterly dates based on the timing of this filing:<a href="#_ftn1" id="_ftnref1">[1]</a><ol class="li-margin"><li style="margin-top: 1rem;">January 1, if filed between September 1 and November 30;</li><li>April 1, if filed between December 1 and February 29;</li><li>July 1, if filed between March 1 and May 31; or</li><li>October 1, if filed between June 2 and August 31.</li></ol></li></ol>The final CCPA regulations, if approved, would thus ordinarily be expected to take effect on either October 1, 2020 or January 1, 2021 (depending on OAL’s approval date). However, the AG has requested that the regulations take effect concurrently with their filing with the Secretary of State. Coupled with the request for an expedited OAL review, the regulations could take effect much sooner, perhaps even before July 1, 2020.It is unclear whether OAL will expedite its review of the AG’s proposed final CCPA regulations, or when the CCPA regulations may become effective if or when they are approved. Notably, however, the AG is empowered to begin enforcing the CCPA on July 1, 2020, regardless of whether the CCPA regulations have been approved by that date. Moreover, AG Becerra affirmed in a <a target="_blank" href="https://www.oag.ca.gov/news/press-releases/attorney-general-becerra-submits-proposed-regulations-approval-under-california">press release</a> yesterday that his office is “committed to enforcing [the CCPA] starting July 1.” Accordingly, CCPA-covered businesses should not expect the AG to delay enforcement activity under the CCPA.The AG’s Proposed Regulations Package—including a final Statement of Reasons and the AG’s formal request for an expedited review and earlier effective date—is accessible <a target="_blank" href="https://oag.ca.gov/privacy/ccpa">here</a>. For additional information and guidance, be sure to visit our <a href="/special-content/california-consumer-privacy-act/">CCPA Resource Center</a>.<div data-type='hr' style='border-top: 3px solid #bbb'></div><a href="#_ftnref1" id="_ftn1">[1]</a> See the <a target="_blank" href="https://www.oag.ca.gov/sites/all/files/agweb/pdfs/privacy/ccpa-rulemaking-fact-sheet.pdf">AG’s “Information about the CCPA Rulemaking Process” fact sheet</a>, which links to an overview of the OAL process and timeline.

One Step Closer: California AG Submits Final Proposed CCPA Regulations for Approval and Requests Expedited Review

Sign Up

Privacy + Data Security