The California Consumer Privacy Act Board (the Board ) unanimously approved a long-awaited final package of new regulations (the regulations ) at its July 24, 2025 meeting, imposing significant new requirements on automated decision-making technology ( ADMT ) as well as privacy risk assessments and cybersecurity audit requirements. Given the impact that these regulations will have on businesses, particularly for those using AI, stakeholders have been closely following the development of these regulations. These regulations create obligations related to certain materials that businesses may need to submit directly to the California Privacy Protection Agency, thus raising the attention that businesses will need to give to these obligations.

We previously discussed a near-fin

See Full Page