Resoruces Dempsey (2025) – California adopts Cybersecurity Audit Rule, outlining ‘reasonable’ cybersecurity CPPA Ruling