Tech · Compliance deadlines

CCPA / CPRA: Risk assessments for pre-existing processing due

Name: CCPA / CPRA: Risk assessments for pre-existing processing due
Start: 2027-12-31
Location: California

Fri, December 31, 2027 · California · US

in 14 mo

Risk assessments must be completed and documented for high-risk processing that began before Jan 1, 2026 and continues after (11 CCR 7155(b)). Not legal advice.

Every year

Jan 1, 2020CCPA / CPRA: CCPA takes effectCaliforniaAn event in California.7 yr agoRegulationsDetails →Jan 1, 2023CCPA / CPRA: CPRA amendments operativeCaliforniaAn event in California.4 yr agoRegulationsDetails →Jan 1, 2025CCPA / CPRA: CPI adjustment of thresholds and finesCaliforniaAn event in California.2 yr agoRegulationsDetails →Sep 22, 2025CCPA / CPRA: ADMT, risk assessment and cybersecurity audit regulations approvedCaliforniaAn event in California.14 mo agoRegulationsDetails →Jan 1CCPA / CPRA: New CCPA regulations take effectCaliforniaAn event in California.10 mo agoRegulationsDetails →Jan 1, 2027CCPA / CPRA: ADMT requirements compliance dateCaliforniaAn event in California.in 2 moRegulationsDetails →Jan 1, 2027CCPA / CPRA: Browsers must support opt-out preference signal (AB 566)CaliforniaAn event in California.in 2 moRegulationsDetails →

Dec 31, 2027CCPA / CPRA: Risk assessments for pre-existing processing dueCaliforniaAn event in California.in 14 moRegulations

Apr 1, 2028CCPA / CPRA: First risk assessment submission to CPPACaliforniaAn event in California.in 17 moRegulationsDetails →Apr 1, 2028CCPA / CPRA: Cybersecurity audit due: revenue over $100MCaliforniaAn event in California.in 17 moRegulationsDetails →Apr 1, 2029CCPA / CPRA: Cybersecurity audit due: revenue $50M-$100MCaliforniaAn event in California.in 2 yrRegulationsDetails →Apr 1, 2030CCPA / CPRA: Cybersecurity audit due: revenue under $50MCaliforniaAn event in California.in 3 yrRegulationsDetails →

Also on Dec 31, 2027

Holidays· United StatesNew Year's DayUnited StatesA public holiday in the United States.in 14 moNager.DateDetails →Observances· DaysNew Year’s EveThe last day of the year.in 14 moWikipedia, computedDetails →

Source, method and history

Source

Regulations

How we know

From the Regulations API (regulations.fru.dev), which cites the official text.

Recurs

one-off

More on Glyph

regulations.fru.dev

Feed

Subscribe to Compliance deadlines

Changes

2026-09-25: added to 2027-12-31