The California attorney general recently published proposed modifications to the operative final regulations to the California Consumer Privacy Act (CCPA), including notable regulatory changes requested by the attorney general for those businesses subject to the act. The third set of proposed modifications to the CCPA regulations clarifies a few issues regarding implementation of the law’s consumer privacy rights, but does not significantly alter the regulatory and enforcement picture. This article discusses the CCPA and the Schrems II decision of the European Court of Justice.