The California Privacy Protection Agency has issued a Notice of Proposed Rulemaking aimed at updating regulations under the California Consumer Privacy Act (CCPA). The Center for Democracy & Technology (CDT) has submitted comments regarding these proposed rules, focusing on automated decision-making technologies (ADMTs) and associated risk assessments.

CDT's comments include several recommendations. They suggest refining the definition of "automated decision-making technology" to ensure businesses that heavily rely on automated systems cannot bypass compliance with the regulations. Additionally, CDT emphasizes that risk assessments should provide sufficient information to evaluate whether an ADMT's risks to consumers are justified by its benefits. Another recommendation is to enhance requirements for businesses to notify consumers before and after using ADMTs, ensuring that consumers can exercise their rights to access and appeal these technologies.