Submit 2026–2027 risk assessment information by April 1 2028
Under California Consumer Privacy Act of 2018
Overview
Submit required summary information for risk assessments conducted during 2026 and 2027 to CPPA by April 1 2028. Imported research notes (check before approving): • Duty holder: regulated entity (Business subject to the CCPA) • Goes to: regulator (California Privacy Protection Agency) • Timing in the source: "no later than April 1, 2028"
Important
This requirement was extracted from the source document. Applicability depends on your organization's circumstances. Review the official source and obtain professional advice where appropriate.
Key information
- Policy
- CCPA
- Jurisdiction
- California
- Obligation type
- Filing
- Frequency
- One-time
- Suggested owner
- Compliance Officer
- Policy categories
- Data Protection, Cybersecurity, Privacy, Compliance
- Source
- § 7157(a)(1), § 7157(a)(1), page 90
- Suggested reminders
- 30 days before · 7 days before · 1 day before
- Policy last reviewed
- Oct 29, 2026
Details
Who this may apply to
Businesses conducting covered risk assessments in 2026 or 2027.
When this applies
One-time · 1 April 2028
From the source
“no later than April 1, 2028. (2) For risk assessments conducted after 2027, the business must submit to the Agency the information required by subsection (b) no later than April 1 following any year during which the business conducted the risk assessments. For example, for risk”
§ 7157(a)(1), § 7157(a)(1), page 90
Other obligations in this policy
Explore other identified requirements from the same source policy.
Remindash provides this information to help organizations identify and track potential obligations. Applicability can depend on your organization's circumstances. Review official sources and obtain professional advice where appropriate.