Part Two: CCPA’s New Rules on Risk Assessments and Cybersecurity Audits

California privacy law has entered a new phase. In Part Two of this two-part episode of The Briefing, Weintraub Tobin Partners Scott Hervey and Richard Buckley break down the CCPA’s new requirements for Risk Assessments and Cybersecurity Audits.

In this episode, they cover:

• When Risk Assessments are required and what they must evaluate
• How businesses must weigh operational benefits against privacy risks
• Who must be involved in conducting Risk Assessments and when
• When Cybersecurity Audits are triggered and what they must include
• What businesses must submit to the California Privacy Protection Agency

Tune in for part two on how a clear look at how California privacy law is turning AI compliance into an operational requirement.