Welcome to Hogan Lovells’ The Data Chronicles, brought to you by the firm’s global Privacy and Cybersecurity practice. This multimedia series is dedicated to the ever-changing legal and regulatory developments in the world of data, privacy, and cybersecurity.

In September, the Board of the California Privacy Protection Agency (CPPA) announced the first public drafts of two forthcoming sets of regulations relating to the California Consumer Privacy Act and California Privacy Rights Act. These “discussion” drafts focus on new requirements related to cybersecurity audits, privacy risk assessments, AI, and automated decision-making. In this episode, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, is joined by Hogan Lovells senior associate Aaron Lariviere to explain the context for the draft regulations, to walk through key features of the privacy risk assessment regulations, and to explore the potential impacts these regulations will have for businesses.