CCPA / CPRA news from Infosec Standards https://infosecstandards.org/standards/ccpa News about CCPA / CPRA, including major updates to our page on it. en-us California Legislature passes bill expanding CCPA deletion rights https://infosecstandards.org/news/ccpa-deletion-rights-bill https://infosecstandards.org/news/ccpa-deletion-rights-bill Fri, 28 Aug 2026 00:00:00 GMT SB 923 would require businesses to delete personal information collected about a consumer from any source, and would require online-only businesses to offer a web form for privacy requests. California data brokers must process DROP deletion requests https://infosecstandards.org/news/ccpa-drop-processing https://infosecstandards.org/news/ccpa-drop-processing Wed, 05 Aug 2026 00:00:00 GMT Under the Delete Act, registered data brokers must access CalPrivacy DROP at least every 45 days and process consumer deletion requests beginning August 1, 2026. CalPrivacy opens first CCPA sectoral audit of gig platforms https://infosecstandards.org/news/ccpa-calprivacy-audit https://infosecstandards.org/news/ccpa-calprivacy-audit Tue, 04 Aug 2026 00:00:00 GMT California's privacy agency launched its first formal sectoral audit, focusing on whether gig economy platforms honor CCPA access rights for consumers and workers. California approves CCPA regulations on cybersecurity audits, risk assessments, and automated decision-making https://infosecstandards.org/news/ccpa-2025-regulations-approved https://infosecstandards.org/news/ccpa-2025-regulations-approved Tue, 23 Sep 2025 00:00:00 GMT The Office of Administrative Law approved the California Privacy Protection Agency's regulations on September 23, 2025. Effective January 1, 2026, they add mandatory risk assessments, annual independent cybersecurity audits for larger data processors, and notice and opt-out rights for automated decision-making, phased in through 2030.