On Nov. 8, the California Privacy Protection Agency Board voted to adopt new rules for data brokers, or businesses that collect and sell personal consumer data to third parties, and advance a raft of proposed rules for privacy risk assessments, cybersecurity audits and the regulation of artificial intelligence technologies such as automated decision-making technology.