Updating Compliance Programs to Address the CPPA’s Regulations on ADMT and Risk Assessments | McDermott

McDermott Will & Schulte, a global law firm

COVERAGE

Updating Compliance Programs to Address the CPPA’s Regulations on ADMT and Risk Assessments

September 17, 2025

Read time: 2 min

The California Privacy Protection Agency (CPPA) updated its draft CCPA regulations with a definition of automated decision-making technology (ADMT) and requirements for risk assessments.

In this Cybersecurity Law Report article, McDermott Will & Schulte privacy lawyers share what businesses need to know, including the draft regulations’ key requirements, steps to determine whether you are in scope, and how to build or update a compliance program to address new obligations

Amy C. Pimentel

Partner

Boston

John C. Ying

Associate

Atlanta

You may also like