What it's really focused on is enabling privacy rights at a scale that's not possible in the current notice and choice framework that we have here in the United States.

So it is pretty, I would say, pretty revolutionary in terms of kind of flipping the balance back to the consumers.

It's the Lawfare podcast. I'm Justin Sherman, contributing editor at Lawfare and CEO of Global Cyber Strategies,

with Tom Kemp, Executive Director of the California Privacy Protection Agency, or CPPA, aka Cal Privacy.

Yes, we can go after global entities because we regulate the collection and use of Californians data.

All the obligations that are in our law around data minimization, honoring privacy rights,

security of personal information applied to all businesses. Today, we're talking about California's

new drop system and the data broker industry, bringing technologists into public service

and the future of state privacy enforcement.

So first, what are the California Privacy Protection Agency's main statutory and regulatory focus areas?

And then second, are there any major differences that you see between the CPP and the authorities

and resources of other states as it pertains to this issue set?

Absolutely.

And thanks, Justin, for having me on.

The California Privacy Protection Agency, now known as CalPrivacy, was created via the voters here in California with the passage of Prop

24 in 2020.

And the agency itself is responsible for implementing, enforcing, and raising awareness

of the California Consumer Privacy Act or CCPA and the California

Delete Act.

And so if you look at what we do, our mission is really focused in six primary areas.

First, rulemaking.

Second, promoting public awareness, i.e. raising privacy literacy for consumers and

...