CCPA / CPRA: ADMT, risk assessment and cybersecurity audit regulations approved

Name: CCPA / CPRA: ADMT, risk assessment and cybersecurity audit regulations approved
Start: 2025-09-22
Location: California

Tech · Compliance deadlines · Mon, September 22, 2025 · California · US

Source

OAL approves the CCPA Updates, Cybersecurity Audit, Risk Assessment, ADMT and Insurance regulations and files them with the Secretary of State. Not legal advice.

Every year

Date	Event	When
Wed, Jan 1, 2020	CCPA / CPRA: CCPA takes effect	7 yr ago
Sun, Jan 1, 2023	CCPA / CPRA: CPRA amendments operative	4 yr ago
Wed, Jan 1, 2025	CCPA / CPRA: CPI adjustment of thresholds and fines	2 yr ago
Mon, Sep 22, 2025	CCPA / CPRA: ADMT, risk assessment and cybersecurity audit regulations approved	12 mo ago
Thu, Jan 1, 2026	CCPA / CPRA: New CCPA regulations take effect	9 mo ago
Fri, Jan 1, 2027	CCPA / CPRA: ADMT requirements compliance date	in 3 mo
Fri, Jan 1, 2027	CCPA / CPRA: Browsers must support opt-out preference signal (AB 566)	in 3 mo
Fri, Dec 31, 2027	CCPA / CPRA: Risk assessments for pre-existing processing due	in 15 mo
Sat, Apr 1, 2028	CCPA / CPRA: First risk assessment submission to CPPA	in 2 yr
Sat, Apr 1, 2028	CCPA / CPRA: Cybersecurity audit due: revenue over $100M	in 2 yr
Sun, Apr 1, 2029	CCPA / CPRA: Cybersecurity audit due: revenue $50M-$100M	in 3 yr
Mon, Apr 1, 2030	CCPA / CPRA: Cybersecurity audit due: revenue under $50M	in 4 yr

Also on Sep 22, 2025

Date	Event	When
Mon, Sep 22, 2025	Sharad Navaratri	12 mo ago
Mon, Sep 22, 2025	September equinox	12 mo ago
Mon, Sep 22, 2025	Mabon	12 mo ago
Mon, Sep 22, 2025	50th anniversary: Sara Jane Moore attempted to assassinate U.S. president Gerald Ford, but failed...	12 mo ago