Cybersecurity · Industry brief

The California Privacy Protection Agency (CalPrivacy) announced the formation of a new Audits Division on August 5, 2026, to proactively evaluate whether businesses' privacy and cybersecurity practices comply with the California Privacy Rights Act (CPRA). The division will assess privacy infrastructures, identify risks, and create evaluation strategies through technologists, distinguishing itself from enforcement actions by conducting audits regardless of whether violations have occurred. CalPrivacy issued a request for input (RFI) seeking feedback from businesses and researchers on emerging technology, inference, and identifiability to inform the development of its audit framework.

(Empty string) The website content is a general advisory article about privacy governance frameworks and SaaS compliance best practices. It explicitly states that "The provided source material does not contain specific information about CPPA enforcement actions, regulatory guidance, or priorities through mid-2024" and acknowledges the absence of "CPPA enforcement statistics, case examples, or specific regulatory guidance from the California agency." The content does not contain news about cybersecurity regulatory enforcement actions, sector funding acquisitions, or information security standards compliance updates—the three specific user intents requested.

The Information Network Security Administration (INSA) in Ethiopia has introduced the Critical Infrastructure Cybersecurity Protection Proclamation, establishing a permanent Critical Infrastructure Cyber Security Fund financed through monthly contributions from critical infrastructure entities, administrative fines, service fees, and voluntary contributions. The legislation designates twelve critical sectors and mandates eighteen cybersecurity obligations including establishing Security Operations Centers, conducting cyber risk assessments, obtaining audit certifications, and reporting incidents to the National Computer Emergency Response Team within 48 hours. Organizations have been granted a one-year grace period for compliance, during which INSA will provide technical support and publish standards. Non-compliance penalties include administrative fines ranging from ETB1.5 million to ETB2 million for failure to report incidents or neglect corrective measures. Source: The Reporter Magazine.