On September 23, 2025, the final regulations proposed by the California Privacy Protection Agency (CPPA) were approved. These regulations address automated decisionmaking technology (ADMT), privacy risk assessments, cybersecurity audits, and related matters. The main elements of the final regulations are the following three items. (1) Automated Decisionmaking Technology (ADMT) ADMT refers to technology that processes …

PPC’s Q&A Q8-9 (translated by me) states as follows, but since there is no exception corresponding to Article 27(5)(i) of the APPI regarding outsourcing for third-party provision of personally referable information. So, in the case of personal data, a return of data from the contractor to the consignor would fall outside the scope of regulation …