WONE Global's guide to United States records this change under data protection. Each statement below has been checked against the source it links to.
California's regulations on cybersecurity audits, risk assessments and automated decision-making technology, together with other CCPA regulation updates, took effect on 1 January 2026.
California. Adopted by the California Privacy Protection Agency board on 24 July 2025 and filed with the Secretary of State on 22 September 2025. Some obligations are phased in after 1 January 2026; the phased dates were not confirmed on the page read.
California Privacy Protection Agency · CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology (ADMT), and Insurance Regulations ↗ Checked against an official source · Not yet professionally reviewed · checked 18 October 2026
This is a summary of the rule as published, not advice on how it applies to you. The WONE Global Partner for this service in United States can advise on that.











