Lindsey Tonsager spoke with IAPP about California's Proposition 24. Ms. Tonsager says, “Privacy pros should be reminding their colleagues that even though we now know the CPRA has passed, many of the CPRA’s details still need to be clarified and defined through regulation.”
Establishment of the new enforcement agency will also be worth paying attention to. She says it's a “key thing to watch.” She adds, “This newly constituted agency will be conducting another round of rulemaking to clarify a number of key areas, including defining the difference between 'service providers' and 'contractors' (which is a new regulated entity under the CPRA).”
She goes on to say, “How the (CPRA) will be interpreted and enforced will depend significantly on who makes up the five-member board of the new (CPPA). Two of these seats (including the chair) will be appointed by the governor, and each of the remaining seats is appointed by the attorney general, Senate Rules Committee, and Speaker of the Assembly, respectively. These positions should be filled in about 90 days.”