On May 1, 2025, the CPPA Board voted to support four California bills that expand privacy protections, including restrictions on location data, neural data protections, data broker disclosure requirements, and teleconference meeting provisions. The Board also took a 'support if amended' position on an AI security bill. This is a legislative support action, not an enforcement action.
In-house legal teams should review their data processing agreements, especially those involving location data, neural data, and biometric data, to ensure compliance with potential new California laws. Vendor agreements with data brokers should include disclosure obligations for sensitive information categories. Additionally, contracts with AI system deployers may need to incorporate information security standards if SB468 passes. Review data deletion and purpose limitation clauses.
Entity
California Privacy Protection Agency
Industry
OtherOfficial Press Release
https://privacy.ca.gov/2025/05/cppa-board-votes-to-support-four-california-bills/
billNavClient.xhtml?bill id=202520260AB1355
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1355
billNavClient.xhtml?bill id=202520260SB44
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB44
billNavClient.xhtml?bill id=202520260SB361
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB361
billNavClient.xhtml?bill id=202520260SB470
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB470
billNavClient.xhtml?bill id=202520260SB468
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB468
@calprivacy
https://www.youtube.com/@calprivacy
20250501.html
https://cppa.ca.gov/meetings/materials/20250501.html
California Attorney General Enforcement Page
https://oag.ca.gov/privacy/privacy-enforcement-actions
"CPPA Board Votes to Support Four California Bills"
"On Thursday, May 1, the California Privacy Protection Agency (CPPA) Board voted to support four California bills."
"Senate Bill 44, introduced by Senator Tom Umberg, expands protections for neural data under the California Consumer Privacy Act (CCPA)"
"Senate Bill 361, introduced by Senator Josh Becker, amends the requirements under the Delete Act"
The California Privacy Protection Agency (CalPrivacy) joined a coalition of 18 Attorneys General and state agencies in opposing the proposed SECURE Data Act, a federal privacy bill that would preempt stronger state privacy laws like the CCPA. The coalition argues the bill would weaken consumer privacy protections, limit enforcement remedies, and undermine California's Delete Request and Opt-out Platform (DROP).
The California Privacy Protection Agency announced that over 300,000 Californians have signed up for the Delete Request and Opt-out Platform (DROP) since its launch five months ago. The Data Broker Registry now includes 581 registered data brokers, the highest number since the registry was established in 2020. Beginning August 1, 2026, all data brokers will be required to access DROP and process deletion requests.
The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.
The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.
The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.
The California Privacy Protection Agency (CalPrivacy) announced the appointment of Sabrina Boyson Ross as its first Chief Privacy Auditor and the formation of a new Audits Division. The division will conduct regulatory examinations of businesses to determine compliance with the California Consumer Privacy Act, and its findings may lead to enforcement referrals.