Court Delays Enforcement of March 29, 2023, CCPA Regulations
Publications
September 2023
On June 30, 2023, the California Superior Court (Court) hearing Cal. Chamber of Commerce v. Cal. Privacy Prot. Agency, No. 34-2023-8004106 (Cal. Sup. Ct.) held that the California Privacy Protection Agency (Agency) cannot enforce the regulations it issued on March 29, 2023, until next year, specifically March 29, 2024.
The regulations are the fruit of the California Privacy Rights Act of 2020 (Act). The Act established new standards regarding the collection, retention, and use of consumer data and created the Agency to implement and enforce the law. The Act required the Agency to adopt final regulations required by the Act by July 1, 2022, and stated “administrative enforcement … shall not commence until July 1, 2023.” Ca. Civ. Code § 1798.185.
The Agency did not approve their first set of regulations until March 29, 2023 (eight months late). These regulations only covered 12 of the 15 areas contemplated by Section 1798.185. The Agency had previously stated its intention to begin enforcing the first set of regulations as soon as July 1, 2023.
The California Chamber of Commerce filed an action and sought a Court order compelling the Agency to adopt final regulations and commanding the Agency to refrain from enforcing the Act within one year of adoption. The Court agreed that the Agency was untimely in its publication of the final regulations and that voters intended for enforcement not to begin for one year following the Agency’s promulgation of final regulations to allow “sufficient time for affected businesses to become compliant with the regulations.” The Court stayed the enforcement of any Agency regulation implemented pursuant to Subdivision (d) for 12 months after that individual regulation is implemented.
The Court rejected Petitioners' request for an order requiring a stay of any enforcement of any California Consumer Privacy Act (CCPA) regulation until the Agency had finalized all the regulations required by the CCPA.
This article is available in the Jenner & Block Japan Newsletter. / この記事はJenner & Blockニュースレターに掲載されています。
The regulations are the fruit of the California Privacy Rights Act of 2020 (Act). The Act established new standards regarding the collection, retention, and use of consumer data and created the Agency to implement and enforce the law. The Act required the Agency to adopt final regulations required by the Act by July 1, 2022, and stated “administrative enforcement … shall not commence until July 1, 2023.” Ca. Civ. Code § 1798.185.
The Agency did not approve their first set of regulations until March 29, 2023 (eight months late). These regulations only covered 12 of the 15 areas contemplated by Section 1798.185. The Agency had previously stated its intention to begin enforcing the first set of regulations as soon as July 1, 2023.
The California Chamber of Commerce filed an action and sought a Court order compelling the Agency to adopt final regulations and commanding the Agency to refrain from enforcing the Act within one year of adoption. The Court agreed that the Agency was untimely in its publication of the final regulations and that voters intended for enforcement not to begin for one year following the Agency’s promulgation of final regulations to allow “sufficient time for affected businesses to become compliant with the regulations.” The Court stayed the enforcement of any Agency regulation implemented pursuant to Subdivision (d) for 12 months after that individual regulation is implemented.
The Court rejected Petitioners' request for an order requiring a stay of any enforcement of any California Consumer Privacy Act (CCPA) regulation until the Agency had finalized all the regulations required by the CCPA.
This article is available in the Jenner & Block Japan Newsletter. / この記事はJenner & Blockニュースレターに掲載されています。
Related Articles
Related Capabilities
© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.
Publications
September 2023
On June 30, 2023, the California Superior Court (Court) hearing Cal. Chamber of Commerce v. Cal. Privacy Prot. Agency, No. 34-2023-8004106 (Cal. Sup. Ct.) held that the California Privacy Protection Agency (Agency) cannot enforce the regulations it issued on March 29, 2023, until next year, specifically March 29, 2024.
The regulations are the fruit of the California Privacy Rights Act of 2020 (Act). The Act established new standards regarding the collection, retention, and use of consumer data and created the Agency to implement and enforce the law. The Act required the Agency to adopt final regulations required by the Act by July 1, 2022, and stated “administrative enforcement … shall not commence until July 1, 2023.” Ca. Civ. Code § 1798.185.
The Agency did not approve their first set of regulations until March 29, 2023 (eight months late). These regulations only covered 12 of the 15 areas contemplated by Section 1798.185. The Agency had previously stated its intention to begin enforcing the first set of regulations as soon as July 1, 2023.
The California Chamber of Commerce filed an action and sought a Court order compelling the Agency to adopt final regulations and commanding the Agency to refrain from enforcing the Act within one year of adoption. The Court agreed that the Agency was untimely in its publication of the final regulations and that voters intended for enforcement not to begin for one year following the Agency’s promulgation of final regulations to allow “sufficient time for affected businesses to become compliant with the regulations.” The Court stayed the enforcement of any Agency regulation implemented pursuant to Subdivision (d) for 12 months after that individual regulation is implemented.
The Court rejected Petitioners' request for an order requiring a stay of any enforcement of any California Consumer Privacy Act (CCPA) regulation until the Agency had finalized all the regulations required by the CCPA.
This article is available in the Jenner & Block Japan Newsletter. / この記事はJenner & Blockニュースレターに掲載されています。
The regulations are the fruit of the California Privacy Rights Act of 2020 (Act). The Act established new standards regarding the collection, retention, and use of consumer data and created the Agency to implement and enforce the law. The Act required the Agency to adopt final regulations required by the Act by July 1, 2022, and stated “administrative enforcement … shall not commence until July 1, 2023.” Ca. Civ. Code § 1798.185.
The Agency did not approve their first set of regulations until March 29, 2023 (eight months late). These regulations only covered 12 of the 15 areas contemplated by Section 1798.185. The Agency had previously stated its intention to begin enforcing the first set of regulations as soon as July 1, 2023.
The California Chamber of Commerce filed an action and sought a Court order compelling the Agency to adopt final regulations and commanding the Agency to refrain from enforcing the Act within one year of adoption. The Court agreed that the Agency was untimely in its publication of the final regulations and that voters intended for enforcement not to begin for one year following the Agency’s promulgation of final regulations to allow “sufficient time for affected businesses to become compliant with the regulations.” The Court stayed the enforcement of any Agency regulation implemented pursuant to Subdivision (d) for 12 months after that individual regulation is implemented.
The Court rejected Petitioners' request for an order requiring a stay of any enforcement of any California Consumer Privacy Act (CCPA) regulation until the Agency had finalized all the regulations required by the CCPA.
This article is available in the Jenner & Block Japan Newsletter. / この記事はJenner & Blockニュースレターに掲載されています。
Related Articles
Related Capabilities
© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.
News and Insights
Event
Amanda Shafer Berman to Speak on Energy and Administrative Law at WEN-DC Webinar
As the Supreme Court's new Term begins, Jenner & Block Partner Amanda Shafer Berman will join a Women's Energy Network of Washington, DC (WEN-DC) webinar on how the Court's decisions are shaping the energy sector.
October 14, 2026
Publications
Partner Amanda Shafer Berman Quoted in Bloomberg Law on Senate Permitting Overhaul Bill
Partner Amanda Shafer Berman was quoted in an October 5 Bloomberg Law article, "Permitting Deal Gives Projects Defense Against Litigation Delays," on the Senate's new permitting overhaul package and its expected impact on litigation over federal permitting reversals.
October 2026
Event
Partner John Storino to Speak at Sandpiper Partners' “AI and Outside Counsel Guidelines Roundtable”
On October 8, Partner John Storino will serve as a panelist at the “AI and Outside Counsel Guidelines Roundtable,” hosted by Sandpiper Partners in Chicago.
October 8, 2026
Event
Partner Meghan Greenfield to Speak on Supreme Court Climate Case at Edison Electric Institute's Fall Legal Conference
On Wednesday, October 7, Partner Meghan Greenfield will speak on a panel titled "Boulder County v. Suncor Energy: What the Supreme Court's Climate Case Means for the Energy Industry" at the Edison Electric Institute's Fall Legal Conference in Salt Lake City, Utah.
October 7, 2026
Publications
The Form Rules Everything: A Seventh Circuit Ruling on ERISA's Substantial Compliance Doctrine
Partner Joseph Torres and Special Counsel Jennifer Beach authored an article for Employee Relations Law Journal examining the Seventh Circuit's decision in Packaging Corp. of America Thrift Plan for Hourly Employees v. Langdon, a ruling that addresses both the standard of review in ERISA interpleader actions and the continued viability of the substantial compliance doctrine for changing plan beneficiaries.
October 5, 2026