Photo of Marlaina Pinto

Marlaina advises clients on a broad range of privacy and data protection matters, drawing on experience in marketing technology. She provides strategic counsel on consumer data use and regulatory obligations under both U.S. state privacy laws and international data privacy laws, such as the GDPR.

Key point: Businesses subject to the CCPA must comply with extensive new regulations.

On September 22, 2025, the California Office of Administrative Law (OAL) approved the California Privacy Protection Agency’s latest California Consumer Privacy Act (CCPA) rulemaking package. The rulemaking package covers updates to the existing regulations, automated decision-making technology (ADMT), risk assessments, cybersecurity audits, and insurance requirements.