Employee Data Under the CPRA: Key Rights and Restrictions

California’s ground-breaking Consumer Privacy Act of 2018 contained several significant exceptions for employee PI. The California Privacy Rights and Enforcement Act of 2020 (CPRA), which takes effect on January 1, 2023, will eliminate those exceptions. At a recent Morrison Foerster presentation, partner Kristen Mathews and firm counsel Suhna N. Pierce took a deep dive into the practical impact of the CPRA in the employment context. This first article in a two-part series distills their insights on data access, deletion, correction and opt-out rights, as well as on anti-retaliation protections and responding to employee rights requests. The second part will cover practical issues around privacy policies, litigation-related requests for information and the enforcement climate. See “CPRA Draft Regulations: Essential Takeaways and 10 Actions to Take Now” (Jul. 13, 2022).

To read the full article

Continue reading your article with a CSLR subscription.