Originallyriginally passed in 2018 and effective in 2020, the California Consumer Privacy Act (CCPA) is a comprehensive privacy law aimed at enhancing California residents’ privacy rights and consumer protection. And to ensure such privacy rights and protections, the act requires covered businesses to follow strict privacy requirements regarding personal information they collect about consumers, such as requiring these businesses to notify consumers about the kinds of personal information it collects about them and what it’s used for.
But the privacy rights and consumer protections didn’t stop there: At the end of 2020, California voters approved Proposition 24, known as the California Privacy Rights Act (CPRA). The CPRA amended the CCPA, building on its framework and expanding some of its protections. While some amendments took effect immediately on approval, many of its provisions took effect on January 1, 2023.
In addition, an exemption for employee-related information expired at the end of 2022, meaning personal information about employees and applicants are now subject to all CPRA requirements.
Download CalChamber's free "California Privacy Rights Act: What Employers Need to Know" white paper for answers to the most frequently asked questions about the law and its upcoming changes, and some steps employers can take in preparation for the new year.
Updated May 2, 2024
