CCPA Regulations

  • On April 21, 2022, rulemaking authority under the California Consumer Privacy Act formally transferred to the California Privacy Protection Agency.
  • The CPPA maintains a webpage for its rulemaking activities.
  • The California attorney general maintains a webpage for the CCPA Regulations it drafted and submitted for approval prior to authority transferring to the CPPA.

The information below is a summary of the timeline for the enacted CCPA regulations.

Note:  This information was last updated May 2022.

May 2022 CCPA Regulations Renumbered
On May 5, 2022, the California Office of Administrative Law, pursuant to Section 100 of OAL’s regulations, approved the transfer of the existing CCPA regulations to Title 11, Division 6, under the jurisdiction of the CPPA. These amendments are non-substantive and renumber the existing CCPA regulations. An explanatory statement and a chart that explains the renumbering can be found on the CPPA's site.

March 2021 Amendments to CCPA Regulations
The attorney general filed the Third and Fourth Sets of Proposed Modifications with the Office of Administrative Law (OAL) in January 2021. The OAL approved these additional amendments to the regulations and they went into effect on March 15, 2021. Note: The attorney general withdrew Section 999.306(f)(2) pertaining to the opt-out button from OAL review and the March 15, 2021 version also includes “non-substantive” changes from the Third and Fourth Set of Proposed Modifications.

Fourth Set of Proposed Modifications – released December 10, 2020
On Dec. 10, 2020, the attorney general released a fourth set of proposed modifications to the CCPA regulations. These proposed modifications amend Section 999.306(b)(3) and add Section 999.306(f) relating to a uniform opt-out button. 

Third Set of Proposed Modifications – released October 12, 2020
On Oct. 12, 2020, the attorney general released a third set of proposed modifications to the CCPA regulations. These proposed modifications relate to Sections 999.306(b)(3), 999.315(h), 999.326(a), and 999.332(a).

Final Regulations - August 14, 2020
The CCPA regulations went into effect on Aug. 14, 2020. The original proposed regulations, the subsequent modifications, and other documents from the rulemaking process are included on the attorney general’s webpage as part of the documents filed with the OAL.