California Privacy Protection Agency

Established by the CPRA, the California Privacy Protection Agency (CPPA) is a new privacy regulator tasked with creating and enforcing California’s growing canon of privacy laws.

The CPPA is currently headed by Ashkan Soltani and will be responsible for:

  • Auditing compliance with existing privacy legislation
  • Evaluating potential violations
  • Levying fines for non-compliance
  • Creating and implementing new laws

As of May 2022, the CPPA was finalizing certain CPRA requirements concerning automated decision-making, cybersecurity audits and risk assessments, and specific guidelines on certain consumer rights. Having already requested feedback on these topics, the CPPA is set to be done by the end of 2022.

Learn more about Mr. Soltani and how he’s approached building the CPPA with this profile from the New York Times.