• videocam Live Webinar with Live Q&A
  • calendar_month December 17, 2026 @ 1:00 PM ET/10:00 AM PT
  • signal_cellular_alt Intermediate
  • card_travel Cybersecurity and Data Privacy
  • schedule 90 minutes

Preparing for California Privacy Enforcement: CCPA Audits, CIPA Litigation Trends, and SB 690 Developments

Governance, Risk Assessment, and Cyber Audit Programs to Meet Evolving Regulatory Frameworks; New Data Broker and AI Rules

About the Course

Introduction

This CLE course will examine California privacy and cybersecurity developments, including California Invasion of Privacy Act (CIPA) litigation, newly enacted SB 690, California Consumer Privacy Act (CCPA) enforcement, data broker obligations, and governance challenges. The panel will discuss practical strategies for audit readiness, risk assessments, and strengthening compliance programs to mitigate legal and regulatory risk. The lessons learned will help practitioners and their business clients prepare for their next data privacy and cybersecurity audit in California. 

Description

California's 2026 legislative session culminated with a major expansion of its privacy and AI framework. Governor Gavin Newsom signed 22 major privacy and AI bills, vetoing only three. Newly enacted laws impact the CCPA, CIPA, data brokers, children's privacy, AI transparency, automated employment decisions, workplace surveillance, healthcare AI, chatbots, digital replicas, and AI auditing. For businesses with national reach, these cannot be ignored or treated as California compliance issues alone. Given California's market size and existing privacy infrastructure, the state's requirements really shape privacy and AI governance programs nationwide.

As California's privacy landscape continues to evolve through a growing wave of consumer privacy litigation, heightened regulatory scrutiny, and expanding governance expectations related to AI and cybersecurity, practitioners must stay current and help clients prepare for audits. This webinar will explore recent CIPA litigation trends, including key claims, defenses, and developments surrounding SB 690. The program will then examine CCPA enforcement and audit activity, emerging requirements affecting data brokers, evolving expectations around AI governance, and best practices for cyber audits and privacy and cybersecurity risk assessments.

Listen to Troutman Pepper Locke attorneys Sadia Mirza, Dustin Taylor, and Shelby Dolen as they unpack the latest developments shaping California's privacy and cybersecurity landscape. Attendees will gain a practical understanding of emerging litigation trends, regulatory priorities, enforcement activity, audit expectations, governance approaches, and improved compliance efforts to meet California's tightening legal landscape. 

Credit Information
  • This 90-minute webinar is eligible in most states for 1.5 CLE credits.


  • Live Online


    On Demand

Date + Time

  • event

    Thursday, December 17, 2026

  • schedule

    1:00 PM ET/10:00 AM PT

I. Recent developments in CIPA litigation

A. Common claims

B. Emerging defense strategies

C. SB 690 impacts on privacy litigation risk

II. Key trends in CCPA enforcement and audit activity:

A. Regulatory priorities

B. Audit readiness considerations

C. Compliance risk

III. Data brokers, AI governance, and cyber audits: emerging legal and compliance obligations; strategies for strengthening oversight, accountability, and risk mitigation 

IV. Practical approaches for privacy and cybersecurity risk assessments, governance, and compliance program management

V. Evaluating and preparing for emerging legal and compliance obligations and risk mitigation

The panel will discuss these and other key considerations:

  • What are important and emerging CIPA litigation trends, including common claims and emerging defense strategies?
  • Why is SB 690 important for privacy litigation risk?
  • When should organizations prepare for a CCPA audit, and what regulatory priorities are driving enforcement?
  • Why are data brokers, AI governance, and cyber audits drawing more regulatory attention in California?
  • How can organizations develop practical approaches for privacy and cybersecurity risk assessments, governance, and compliance program management to address evolving California privacy requirements?
  • What other factors should be evaluated and considered to mitigate California-specific privacy risks?