Got Workers in California? It's Time to Brush up on the State's Data Privacy Law
Data Privacy attorney Ashley Shively spoke with HR Dive about the California Consumer Privacy Act (CCPA) and what employers need to know to remain in compliance with it. Passed in 2018 and amended in 2020, the act regulates the collection, use and disclosure of "personal information" that businesses collect from California residents, giving residents the right to know what information a business has obtained about them, have that information deleted and opt out of the sale of that information. The law also defines "personal information" broadly, encompassing traditional identifying information like name and physical address in addition to new categories like IP address, browsing history and even biometric data. It also applies to any business — regardless of location — that has a gross annual revenue of $25 million or handles personal information of 50,000 California residents each year.
"It's the first comprehensive state data privacy law in the United States," she said. "Subject to certain limited exceptions, the CCPA applies to most employers that collect or use the personal information of their California employees, applicants and contractors."