Avy Mallik

Morrison Foerster’s State and Local Government Task Force is pleased to provide our quarterly newsletter summarizing noteworthy developments from state attorneys general (“State AGs”) across the country and local government agencies and legislative bodies, with links to primary sources.

The California Privacy Protection Agency (“CalPrivacy”) has issued an Invitation for Preliminary Comments on a key upcoming requirement under the Delete Act: independent audits of data brokers’ deletion practices. CalPrivacy is accepting comments through May 7, 2026. While the audit requirements do not come into force until 2028, CalPrivacy is shaping the audit rules now, and data brokers, consumers, and other stakeholders have the opportunity to weigh in on this process.

Avy Mallik wrote the article, "California's DFAL: Understanding the new regulatory framework for digital asset businesses" for the Daily Journal. The article provides an overview of California’s Digital Financial Assets Law (DFAL) and how regulators will be assessing the license applications. Highlights from the article: DFAL establishes a comprehensive licensing, supervisory, and enforcement framework for digital asset businesses operating in or serving California.