California Rulemaking Process Overview

Additional Insights

• The CPPA's rulemaking process (Article)

This chart provides a roadmap for the California rulemaking process as the California Privacy Protection Agency continues to promulgate regulations on topics delegated to it by California legislators and voters, including automated decision-making, cybersecurity audits and risk assessment.

Relevant resources include the CPPA's list of laws and regulations, and the California Office of Administrative Law's provided info about the regular rulemaking process.

The IAPP additionally published a California Privacy and AI Legislation Tracker, which highlights any California data law with potential privacy or AI governance implications across sectors.