- with Senior Company Executives, HR and Inhouse Counsel
- with readers working within the Automotive and Technology industries
On November 7, 2025, the California Privacy Protection Agency (CalPrivacy) voted to advance three legislative proposals that, if enacted, would materially reshape certain compliance obligations under the California Consumer Privacy Act (CCPA).
The first legislative proposal would create a whistleblower program that would provide financial awards to incentivize insiders to report CCPA violations and include anti-retaliation protections to shield employees who come forward. Instead of a private right of action, the program would allow CalPrivacy to partner with whistleblower attorneys to share portions of administrative fines.
The second legislative proposal would expand consumers' right to delete personal data, including data held by third parties, potentially increasing the operational complexity of deletion workflows and vendor management. If this proposal is enacted, businesses would need to reassess data mapping, contractual obligations, and technical processes to ensure downstream deletion across service providers and other third parties in compliance with the proposal.
The third legislative proposal would make it easier for consumers to submit privacy requests by requiring online-only businesses to offer additional submission methods beyond a single designated email address. If enacted, this could necessitate added interfaces, verification mechanisms, and additional resources for businesses.
Businesses should monitor these proposals closely and prepare for more robust internal reporting protocols and expanded data request handling capabilities. While details remain to be finalized, these legislative proposals indicate that consumer rights and practical accessibility continue to remain enforcement priorities.
Visit us at mayerbrown.com
Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.
© Copyright 2025. The Mayer Brown Practices. All rights reserved.
This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.
