Administering the data broker registration process has proven a challenge for the California Privacy Protection Agency (CPPA) due to the statute's vague language and undefined terms. In response, the CPPA seeks public feedback through August 20 to address "common questions and obstacles that surfaced for data brokers in the most recent registration period," including how to pay the registration fee and the requirements for making updates to the registry.
The proposed rules clarify the requirements for registration, updates to the registry and website disclosures, including making clear that each data broker business is required to uniquely register, even if it is a subsidiary or parent company to another business; establish rules for employees and agents to register on behalf of a data broker and for preventing sweeping amendments or withdrawals to registration information after the registration period; and mandate that "accurate and functional website links and email addresses" be provided to the agency.
Data brokers must carefully consider the proposed regulations and determine whether to craft a submission to assist the CPPA in fine-tuning these regulations.