As artificial intelligence (AI) continues to transform industries, businesses are increasingly integrating AI tools into their workforce operations. In response, California regulators have been actively working to address the potential legal challenges posed by emerging AI technologies.
On July 24, 2025, the California Privacy Protection Agency (CPPA) approved regulations that would impose a new requirement under the California Consumer Privacy Act: mandatory annual cybersecurity audits for certain businesses. These new requirements are now undergoing review by the California Office of Administrative Law (OAL). OAL can (a) approve the regulations; (b) reject the regulations; or (c) approve some portion of the regulations and reject others. If OAL approves the regulations and sends them to the California Secretary of State by August 31, 2025, the proposed regulations would go into effect on October 1, 2025. If they are sent to the Secretary of State after August 31, the effective date would be January 1, 2026.
Digital collections require more than speed and scale—they require trust. And when that trust must extend across multiple parties—lenders, collection agencies, and debt settlement companies—the challenge compounds. Secure communication channels aren’t just a compliance checkbox; they’re the infrastructure for effective and coordinated resolution.
A federal judge in Kentucky has granted a stay in a legal challenge to the Consumer Financial Protection Bureau’s (CFPB) personal financial data rights rule, a regulation designed to increase consumer access to their financial data. In response to the legal dispute, the CFPB has announced plans to revisit and substantially revise the rule.
The CFPB is seeking information to help determine whether to propose rules to amend the thresholds for defining “larger participants” in four markets.