California’s Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give consumers substantial rights regarding the disclosure and use of their personal information collected by businesses subject to the law. Significantly, CCPA/CPRA define the term “consumer” to mean any California resident. This broad definition extends not only a business’s individual customers, but also its employees, job-applicants and even its business-to-business (B2B) contacts. We have previously discussed the compliance requirements of these data privacy laws on organizations doing business in California, and the moratoriums for B2B and employee/applicant data that that the Legislature had put in place exempting covered businesses from complying with certain requirements of the laws.[1] Unless extended by the Legislature (which appears unlikely) or preempted by federal privacy legislation (which appears even more unlikely), the moratoriums will sunset on January 1, 2023. Accordingly, covered businesses should begin preparing now to meet their upcoming expanded statutory obligations to protect consumers data privacy.
Blog Editors
Recent Updates
- Watch: Hemant Gupta Bridges the Gap Between Cutting-Edge Technology and Intellectual Property Protection
- A Proposed Overhaul to Federal Grantmaking: What It Could Mean for Grantees, Healthcare and Other Researchers, and Colleges and Universities
- Watch: Agencies Step Up DEI Scrutiny, DOL Clarifies Overtime Rules, and California Court Limits PAGA Claims - Employment Law This Week
- Virginia Pay Transparency Requirements Take Effect July 1, 2026
- Connecticut Joins Growing Number of States Regulating Workplace AI and Mandating Notice for Certain AI Uses as Well as Imposing New Disclosure Requirements for Certain Reductions in Force