Tom Kemp (CalPrivacy): on the SECURE Data Act, CCPA whistleblowers, DROP, and AB 566

As Executive Director of CalPrivacy (California Privacy Protection Agency), Tom Kemp oversees the CPPA’s mission to enforce and implement California’s comprehensive privacy laws and ensure the public has a strong understanding of their rights. Tom has a deep understanding of privacy and cybersecurity, combined with his track record as an executive in the tech industry.

References:

• Breakfast Workshop: Santa Monica - Registration

• Tom Kemp on LinkedIn

• Daniel Solove: On Privacy and Technology (Masters of Privacy, March 2025)

• CalPrivacy

• DROP System

• Data Broker Registry

• California expands data broker registration requirements, SP 361 (Hunton Privacy Blog, October 2025)

• Expanding Privacy Rights Act (SB 923, introduced on January 28, 2026)

• California enacts first-in-nation law requiring web browser opt-out preference signal, AB 566 (Hunton Privacy Blog)

• California Proposition 24, Consumer Personal Information Law and Agency Initiative (2020)

• Data broker-provided customer properties in action - enriching first-party data sets for Conversion API uploads (Cognism)

• California Privacy Protection Agency releases letter opposing the SECURE Data Act

• SECURE Data Act (H.R. 8413, Introduced 04/21/2026)

• Whistleblower Protection and Privacy Act (AB 2021), linking the California Whistleblower Protection Act’s principles to the California Consumer Privacy Act (CCPA) to expose privacy violations hidden within corporate “black boxes”.