The implementing regulations under the California Consumer Privacy Act of 2018 (CCPA) are one step closer to taking effect, following California Attorney General (AG) Xavier Becerra’s submission of final proposed regulations to the California Office of Administrative Law (OAL) for its review and approval. The final proposed regulations are substantively unchanged from the second modified draft regulations that the AG’s office issued on March 11, 2020 (which our team summarized in a previous client alert).
Consistent with the CCPA’s requirement that the AG adopt initial regulations by July 1, 2020, as well as AG Becerra’s public commitment to begin enforcing the CCPA on July 1, 2020, AG Becerra has requested an expedited process:
The final CCPA regulations, if approved, would thus ordinarily be expected to take effect on either October 1, 2020 or January 1, 2021 (depending on OAL’s approval date). However, the AG has requested that the regulations take effect concurrently with their filing with the Secretary of State. Coupled with the request for an expedited OAL review, the regulations could take effect much sooner, perhaps even before July 1, 2020.
It is unclear whether OAL will expedite its review of the AG’s proposed final CCPA regulations, or when the CCPA regulations may become effective if or when they are approved. Notably, however, the AG is empowered to begin enforcing the CCPA on July 1, 2020, regardless of whether the CCPA regulations have been approved by that date. Moreover, AG Becerra affirmed in a press release yesterday that his office is “committed to enforcing [the CCPA] starting July 1.” Accordingly, CCPA-covered businesses should not expect the AG to delay enforcement activity under the CCPA.
The AG’s Proposed Regulations Package—including a final Statement of Reasons and the AG’s formal request for an expedited review and earlier effective date—is accessible here. For additional information and guidance, be sure to visit our CCPA Resource Center.