Client Alert: California Privacy Protection Agency to Start Formal CPRA Rulemaking Process

On June 8, 2022, the California Privacy Protection Agency (“CPPA” or “Agency”) voted to begin the formal rulemaking process for regulations implementing the California Privacy Rights Act (CPRA). The Agency Board discussed and approved draft proposed regulations and an Initial Statement of Reasons that were posted on the Agency's website on May 27, 2022 and June 3, 2022, respectively. These draft regulations—which will be subject to public comment and revision before they become final—provide important guidance on implementation of significant provisions in the CPRA regarding, for example, sensitive consumer personal information, opt-out links, mandatory recognition of opt-out preference signals, and additional topics. A high-level summary of the proposed regulations is provided below.
 
First, an important caveat: these draft regulations do not cover every topic on which the CPRA tasked the Agency with adopting regulations. The draft notably does not address how businesses should conduct privacy risk assessments, cybersecurity audits, or provide access/opt-out rights to consumers regarding the use of automated decision-making technology (including profiling). Nonetheless, the 66 pages of proposed draft regulations contain important guidance on and illustrative examples of a number of key issues, including likely requirements for opt-out links, recognition of opt-out signals, and obtaining consumer consent without being “manipulative.” The draft regulations are detailed, technical, and prescriptive, which will increase compliance costs for businesses operating in California.
 

Read the full alert here.

Related Capabilities

Related Locations

© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.

Client Alert: California Privacy Protection Agency to Start Formal CPRA Rulemaking Process
On June 8, 2022, the California Privacy Protection Agency (“CPPA” or “Agency”) voted to begin the formal rulemaking process for regulations implementing the California Privacy Rights Act (CPRA). The Agency Board discussed and approved draft proposed regulations and an Initial Statement of Reasons that were posted on the Agency's website on May 27, 2022 and June 3, 2022, respectively. These draft regulations—which will be subject to public comment and revision before they become final—provide important guidance on implementation of significant provisions in the CPRA regarding, for example, sensitive consumer personal information, opt-out links, mandatory recognition of opt-out preference signals, and additional topics. A high-level summary of the proposed regulations is provided below.
 
First, an important caveat: these draft regulations do not cover every topic on which the CPRA tasked the Agency with adopting regulations. The draft notably does not address how businesses should conduct privacy risk assessments, cybersecurity audits, or provide access/opt-out rights to consumers regarding the use of automated decision-making technology (including profiling). Nonetheless, the 66 pages of proposed draft regulations contain important guidance on and illustrative examples of a number of key issues, including likely requirements for opt-out links, recognition of opt-out signals, and obtaining consumer consent without being “manipulative.” The draft regulations are detailed, technical, and prescriptive, which will increase compliance costs for businesses operating in California.
 

Read the full alert here.

Related Capabilities

Related Locations

© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.

News and Insights

Event

Amanda Shafer Berman to Speak on Energy and Administrative Law at WEN-DC Webinar

As the Supreme Court's new Term begins, Jenner & Block Partner Amanda Shafer Berman will join a Women's Energy Network of Washington, DC (WEN-DC) webinar on how the Court's decisions are shaping the energy sector.

October 14, 2026

Publications

Partner Amanda Shafer Berman Quoted in Bloomberg Law on Senate Permitting Overhaul Bill

Partner Amanda Shafer Berman was quoted in an October 5 Bloomberg Law article, "Permitting Deal Gives Projects Defense Against Litigation Delays," on the Senate's new permitting overhaul package and its expected impact on litigation over federal permitting reversals.

October 2026

Event

Partner John Storino to Speak at Sandpiper Partners' “AI and Outside Counsel Guidelines Roundtable”

On October 8, Partner John Storino will serve as a panelist at the “AI and Outside Counsel Guidelines Roundtable,” hosted by Sandpiper Partners in Chicago.

October 8, 2026

Event

Partner Meghan Greenfield to Speak on Supreme Court Climate Case at Edison Electric Institute's Fall Legal Conference

On Wednesday, October 7, Partner Meghan Greenfield will speak on a panel titled "Boulder County v. Suncor Energy: What the Supreme Court's Climate Case Means for the Energy Industry" at the Edison Electric Institute's Fall Legal Conference in Salt Lake City, Utah.

October 7, 2026

Publications

The Form Rules Everything: A Seventh Circuit Ruling on ERISA's Substantial Compliance Doctrine

Partner Joseph Torres and Special Counsel Jennifer Beach authored an article for Employee Relations Law Journal examining the Seventh Circuit's decision in Packaging Corp. of America Thrift Plan for Hourly Employees v. Langdon, a ruling that addresses both the standard of review in ERISA interpleader actions and the continued viability of the substantial compliance doctrine for changing plan beneficiaries.

October 5, 2026