California Privacy Rights Act Regulations are finalized. What CA employers need know.

Excerpt from our friends at Littler. 

After months of uncertainty, the rulemaking process for the California Privacy Rights Act (CPRA), the first-ever comprehensive U.S. data privacy law applicable to human resources data (“HR Data”), concluded on March 29, 2023.  This moment was critical for virtually all employers with employees in California (“California Employers”).  Ambiguities plaguing the CPRA itself and uncertainty over the regulatory requirements had made it impossible to implement a CPRA compliance program without risking the need for subsequent modifications to address key rule changes.  With that risk now eliminated, California Employers can put the finishing touches on required notices and policies, distribute them, and take the other steps necessary to implement their compliance program.

• The final CPRA regulations clear the way for California employers to finalize their CPRA compliance program before the July 1, 2023 enforcement date.
• The regulations clarify some points left unclear by the statute, including that the notice at collection may be combined with the privacy policy.
• The final rule-making added many requirements for California employers, including additional disclosures in the privacy policy, supplemental provisions in vendor agreements, and more steps to the process of responding to data rights requests.
  
  

Get the full Implications of the Final Regulations for the Notice at Collection and Privacy Policy. Read the full article here.