The California Privacy Protection Agency (CalPrivacy) has already had a busy 2026. Since the start of January, the agency hired its first chief privacy auditor, launched an Audits Division to review companies’ compliance, opened the Delete Request and Opt-Out Platform for consumers, and, most recently, sponsored a novel bill to incentivize privacy whistleblowers. Signaling ongoing active enforcement, on March 3, CalPrivacy issued a decision requiring PlayOn Sports to pay a $1.1 million fine for privacy violations involving students. CalPrivacy Executive Director Tom Kemp spoke to the Cybersecurity Law Report about these developments, the next phases of enforcement and rulemaking, considerations for business leaders and what else lies ahead in 2026 for the agency and the companies it regulates. See “Outgoing CPPA Board Member Discusses Rulemaking and Looming Privacy Issues” (Sep. 25, 2024).