California Regulator Might Narrow Who Has to Conduct Annual Cyber Audits

Whatever the California Privacy Protection Agency board decides will have sweeping implications because the rules apply to all companies doing business in the state.