Employee Data Under the CPRA: Rights Requests, Privacy Policies and Enforcement

California’s Privacy Rights and Enforcement Act of 2020 (CPRA), which takes effect January 1, 2023, eliminates some of the exceptions that the CCPA originally put in place, specifically affecting employee data. This second part of our coverage of a recent Morrison Foerster presentation featuring attorneys Kristen Mathews and Suhna N. Pierce covers practical issues around rights requests from employees, such as when they arise in a pre-litigation context; drafting compliant privacy policies; and the enforcement climate. The first part of this two-part article series covered the panelists’ insights on six key employee rights under the CPRA and preparing to respond to an exercise of rights. See “Show Me the Data: How to Conduct Audits for Data Minimization” (Nov. 18, 2020).

To read the full article

Continue reading your article with a CSLR subscription.