All US entities created by a filing made with a secretary of state, and all foreign entities registered to do business by the filing of a document with a secretary of state.
Who must report? All US entities created by a filing made with a secretary of state, and all foreign entities registered to do business by the filing of a document with a .
Until late August 2023, California's data protection law, the California Consumer Privacy Act, or "CCPA," only provided for future rulemaking on automated decision-making, including profiling, on risk assessments.