California: CPPA announces informational sessions for preliminary CPRA rulemaking
The California Privacy Protection Agency ('CPPA') announced, on 18 March 2022, that it will hold informational sessions on 29 and 30 March 2022. In particular, the CPPA noted that the first session, on 29 March 2022, will address various topics on an overview of personal information and the California Consumer Privacy Act of 2018 ('CCPA'), which will include:
- personal information data flows and how personal information is collected, sold, and shared;
- how the CCPA interacts with personal information data flows;
- business and consumers interactions with respect to dark patterns;
- the situation between business practices and consumer preferences; and
- opt-out preference signals and the CCPA.
The CPPA detailed that the second session, on 30 March 2022, will be focused on an overview of risk assessments and consumer rights with regards to automated decision-making, addressing topics including:
- challenges and solutions;
- data privacy impact assessments and what should be considered; and
- cybersecurity audits.
In addition, the CPPA noted that it will also hold stakeholder sessions, although dates for these sessions are not yet available, but will be expected in April 2022. In this context, the CPPA noted that these stakeholder sessions will provide stakeholders with an opportunity to discuss the relevant topics for the upcoming rulemaking.