The ramp‑up period for honoring employees’ rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, is over. In July 2023, the California AG announced an investigative sweep focused on employee data, with letters sent to unnamed large employers in the state “requesting information on the companies’ compliance with the CCPA with respect to the personal information of employees and job applicants.” The sweep put California companies on notice that the AG’s office is not waiting to enforce the requirements around PI collected in the recruitment and employment context. This targeted checklist, based on our previous articles and input from a Littler Mendelson expert, was designed to help companies subject to the CCPA respond to employee rights requests.