Insights

California_Attorney_General_Submits_Final_Propose

California Attorney General Submits Final Proposed CCPA Regulations to Office of Administrative Law

The Attorney General requested expedited review by the Office of Administrative Law and asked that the regulations become effective upon filing with the Secretary of State.

On June 1, 2020, the Office of the California Attorney General ("AG") submitted the final rulemaking record under the California Consumer Privacy Act ("CCPA") to the California Office of Administrative Law ("OAL"). The record includes, among other documents, the final text of the proposed CCPA regulations and the Final Statement of Reasons, which summarizes and responds to each public comment received and explains the bases for the regulations. The final text of the proposed CCPA regulations submitted to OAL remains unchanged from the AG's most recent modifications, which we previously discussed in "California Attorney General Releases Second Set of Modifications to the Proposed CCPA Regulations." The OAL must review the rulemaking record for procedural compliance with the California Administrative Procedure Act ("APA") before the regulations can be approved and filed with the Secretary of State. 

Typically, the OAL has 30 working days to determine whether the record satisfies the procedural requirements of the APA. However, in light of the COVID-19 pandemic, the OAL has an additional 60 calendar days for review under Executive Order N-40-20.

In California, regulations generally become effective on one of four prescribed dates, which is dictated by the date they are filed with the Secretary of State. However, the AG's Office requested that the OAL perform an expedited review (within 30 working days) and that the regulations become effective upon filing with the Secretary of State. 

Despite uncertainty regarding the effective date of the final regulations, the AG reiterated that his office remains committed to enforcing the CCPA beginning July 1, 2020. Businesses subject to the CCPA may consider updating their privacy program with these proposed final regulations in mind while they are pending OAL review and approval.

Insights by Jones Day should not be construed as legal advice on any specific facts or circumstances. The contents are intended for general information purposes only and may not be quoted or referred to in any other publication or proceeding without the prior written consent of the Firm, to be given or withheld at our discretion. To request permission to reprint or reuse any of our Insights, please use our “Contact Us” form, which can be found on our website at www.jonesday.com. This Insight is not intended to create, and neither publication nor receipt of it constitutes, an attorney-client relationship. The views set forth herein are the personal views of the authors and do not necessarily reflect those of the Firm.