CCPA Prepares Regulations for Automated Decision-Making Tech

The California Privacy Protection Agency (CPPA) is preparing to hold deliberations on its draft regulations for Automated Decision-Making Technologies (ADMT). Issued near the end of last month, the draft regulations are aimed at lining up the CCPA’s rules and enforcement actions with the Consumer Privacy Protection Act.

The CCPA has the authority to issue regulations related to consumer privacy and data protection, investigate potential privacy violations, and enforce compliance. The agency plays a critical role in ensuring businesses respect the privacy rights of consumers, including managing the collection, usage, and sharing of personal information.

ADMT are essentially defined as technologies that process data to execute decisions or aid human decision-making. The draft regulations for this tech focus on ensuring notice, transparency, and consumer choice. Businesses must inform consumers in advance about the use of their personal data in ADMT systems, offering opt-out rights with exceptions for security or essential business functions.

The CPPA’s draft regulations include a requirement for businesses to provide opt-out mechanisms to consumers in public establishments whenever ADMTs, such as facial recognition, are deployed. Additionally, consumers have the right to understand the ADMT logic affecting them and can request this information, with certain exceptions for security and safety. In cases of denied access, consumers can appeal to the CPPA and the California Attorney General’s Office.

The CPPA will open discussions on the draft regulations at a meeting on December 8, and expects to start formalizing its rules in early 2024.

Source: JD Supra

–

December 8, 2023 – by the FindBiometrics Editorial Team