On March 12, 2025, the California Privacy Protection Agency (CPPA) announced a settlement with American Honda Motor Co. (Honda) over alleged violations of the California Consumer Privacy Act (CCPA). The CPPA investigated Honda as part of its investigative sweep into the data privacy practices of connected vehicles and related technologies, announced in July 2023. The CPPA specifically alleged, among other things, that Honda engaged in practices that made it difficult for Californians to exercise their out-opt rights and shared consumers’ personal information with ad tech service providers without proper contractual protections.Continue Reading Lessons from the CPPA’s $632,500 Settlement with Connected Vehicle Manufacturer
Clinton Oxford
CPPA Votes Out Proposed Delete Request and Opt-Out Platform (DROP) Data Broker Regulations
On March 7, 2025, the California Privacy Protection Agency (CPPA) Board met to discuss its proposed data broker regulations concerning the Delete Request and Opt-Out Platform (DROP) and voted to authorize CPPA staff to advance the regulations to formal rulemaking. As mandated by the Delete Act (discussed in a previous alert), the DROP will allow California residents to submit a single request to delete all personal information held by all data brokers operating in the state via an accessible mechanism. Data brokers would be required to access the DROP for updates every 45 days and delete the personal information of any state resident that matched the data broker’s records unless a deletion exception set forth in the California Consumer Privacy Act (CCPA) applies. These regulations also follow the CPPA’s November 2024 meeting, during which CPPA staff provided an update on the development of the DROP.Continue Reading CPPA Votes Out Proposed Delete Request and Opt-Out Platform (DROP) Data Broker Regulations
Colorado AG’s Office Announces Final Colorado Privacy Act Rules: Key Takeaways
On March 15, 2023, the Colorado Attorney General’s (Colorado AG) office released the final version of the Colorado Privacy Act (ColoPA) rules (the final rules), which are based on public comments on the third version…
Continue Reading Colorado AG’s Office Announces Final Colorado Privacy Act Rules: Key TakeawaysColorado Attorney General’s Office Releases Third Version of Draft Rules for Colorado Privacy Act: Key Takeaways
On January 27, 2023, the Colorado Attorney General’s (Colorado AG) office released the third version of its proposed draft rules (third draft) for the Colorado Privacy Act (ColoPA) based on public comments it received on…
Continue Reading Colorado Attorney General’s Office Releases Third Version of Draft Rules for Colorado Privacy Act: Key TakeawaysColorado Attorney General’s Office Releases Modified Draft Rules for Colorado Privacy Act: Key Takeaways
On December 21, 2022, the Colorado Attorney General’s office published an updated version of proposed draft rules (“modified draft rules”) to the Colorado Privacy Act (ColoPA), which revise the initial draft rules issued in October…
Continue Reading Colorado Attorney General’s Office Releases Modified Draft Rules for Colorado Privacy Act: Key TakeawaysCalifornia Privacy Protection Agency Releases Modified Proposed CPRA Regulations: An In-Depth Analysis
Written Comments Due by November 21
On November 3, 2022, the California Privacy Protection Agency (CPPA, or the Agency) issued modified proposed regulations implementing the California Privacy Rights Act (CPRA),[1] which revise the…
Continue Reading California Privacy Protection Agency Releases Modified Proposed CPRA Regulations: An In-Depth AnalysisColorado Attorney General Issues Draft Rules for the Colorado Privacy Act
On October 10, 2022, the Colorado Secretary of State published draft rules for the Colorado Privacy Act (ColoPA) in the Colorado Register, thus initiating a public comment period that will run through February 1, 2023.…
Continue Reading Colorado Attorney General Issues Draft Rules for the Colorado Privacy Act