California’s privacy regulator is considering narrowing the number of businesses it will require to perform an annual cybersecurity audit.

At a public meeting Friday, the California Privacy Protection Agency board indicated that it will look into cost burdens for companies that do business in California before it moves to finalize the draft audit regulations that it unveiled in late August.