Part Two: CCPA’s New Rules on Risk Assessments and Cybersecurity Audits

California privacy law has entered a new phase. In Part Two of this two-part episode of The Briefing, Weintraub Tobin Partners Scott Hervey and Richard Buckley break down the CCPA’s new requirements for Risk Assessments and Cybersecurity Audits. In this episode, they cover: When Risk Assessments are required and what they must evaluate How businesses must weigh operational benefits against privacy risks Who must be involved in conducting Risk Assessments and when When Cybersecurity Audits are triggered and what they must include What businesses must submit to the California Privacy Protection Agency Tune in for part two on how a clear look at how California privacy law is turning AI compliance into an operational requirement.