How CalPrivacy is Leading Privacy in the US E164

This episode of The FIT4Privacy Podcast features Tom Kemp, Director of CalPrivacy (the California Privacy Protection Agency), discussing California's pioneering role in U.S. privacy legislation. As the first state to pass a comprehensive privacy law with the CCPA in 2018—later strengthened by the 2020 ballot initiative Prop 24—California has become a national and global model for consumer privacy rights. Kemp highlights CalPrivacy’s five core mandates: enforcement, regulation development, public education, policy advocacy, and implementing the California Delete Act (DROP), a single-click opt-out system now used by over 270,000 Californians. The agency is also leading in AI regulation, having developed the U.S.'s most comprehensive rules on automated decision-making involving personal data, effective January 2027. Despite the absence of a federal privacy law, California’s leadership is driving a wave of state-level legislation, including AI-specific laws in Colorado and others. Kemp emphasizes the balance between innovation and consumer protection, noting California’s economy has grown to fourth-largest globally since the CCPA’s passage, proving that strong privacy laws can coexist with technological advancement. The episode concludes with a call to action for consumers to use the DROP system and for businesses to engage with CalPrivacy’s evolving guidance. Key takeaways include: California’s privacy leadership stems from a century-long tradition of consumer protection and direct democracy; the DROP system is a major step toward making privacy rights accessible at scale; CalPrivacy is setting a precedent in AI regulation through robust automated decision-making rules; the opt-out model, while not perfect, enables broader consumer adoption than opt-in; and state-level privacy laws are increasingly harmonizing across the U.S., creating a de facto national standard. The overall sentiment is highly positive, reflecting confidence in California’s model as both effective and scalable.