The California Consumer Privacy Act (CCPA) was the first comprehensive consumer privacy law in the United States, in effect since 2020 and broadened in 2023 by the California Privacy Rights Act. It lets Californians see, correct, and delete the personal information businesses collect about them and opt out of its sale or sharing, and it remains the only state law backed by a dedicated regulator, the California Privacy Protection Agency.

Today, we (with a group of privacy and consumer advocacy organizations) submitted comments to the California Attorney General's office weighing in on proposed California Consumer Privacy Act (CCPA) regulations. Overall, we believe the draft regulations bring clarity and practical guidance to the CCPA and represent a step forward for consumer privacy. In addition, we greatly appreciate the Attorney General’s refusal to weaken the CCPA’s definition of personal information despite requests from industry.