{"id":726,"date":"2020-02-13T13:06:52","date_gmt":"2020-02-13T17:06:52","guid":{"rendered":"http:\/\/blogs.duanemorris.com\/techlaw\/?p=726"},"modified":"2020-02-13T13:06:52","modified_gmt":"2020-02-13T17:06:52","slug":"employee-rights-rolled-into-californias-new-consumer-privacy-act-what-employers-should-know","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/techlaw\/2020\/02\/13\/employee-rights-rolled-into-californias-new-consumer-privacy-act-what-employers-should-know\/","title":{"rendered":"Employee Rights Rolled Into California&#8217;s New Consumer Privacy Act &#8211; What Employers Should Know"},"content":{"rendered":"<p class=\"DMBdyTxt\"><span lang=\"EN\">California has enacted the California Consumer Privacy Act of 2018, establishing the strictest data privacy law in the United States. Recent amendments provide a one-year partial exemption for <\/span>personal information <span lang=\"EN\">that is collected from job applicants, employees, business owners, directors, officers, medical staff or contractors. However, qualifying employers are still required to provide certain disclosures and are still liable for statutory damages if unencrypted, sensitive employee data is breached as a result of a failure to implement reasonable security measures. <\/span><\/p>\n<p class=\"DMBdyTxt\"><span lang=\"EN\">The following is a CCPA checklist for employers:<\/span><\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Determine whether the CCPA applies to your business.<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Inform key decision-makers about the CCPA and appoint privacy compliance manager.<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Conduct data mapping of employee personal information.<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Draft an employee-specific disclosure document.<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Ensure that the employee disclosure is provided at or prior to the collection of employee personal information (including all applicants).<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\">\u00a0 \u00a0 \u00a0\u00a0<\/span><\/span><\/span>Ensure that all contracts with service providers with access to employee personal information include robust information security and privacy provisions.<\/p>\n<p class=\"DMBdyTxt\" style=\"text-indent: -.25in;margin: 0in 0in 6.0pt .5in\"><!-- [if !supportLists]--><span style=\"font-family: Symbol\"><span>\u00b7<span style=\"font: 7.0pt 'Times New Roman'\"> \u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/span><\/span>Ensure compliance with other privacy, security and data protection and disposal laws.<\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">For more detailed information on this topic, please see our <a href=\"https:\/\/www.duanemorris.com\/alerts\/new_california_privacy_law_extends_employee_rights_within_beyond_state_0220.html\"><em>Alert<\/em><\/a>. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>California has enacted the California Consumer Privacy Act of 2018, establishing the strictest data privacy law in the United States. Recent amendments provide a one-year partial exemption for personal information that is collected from job applicants, employees, business owners, directors, officers, medical staff or contractors. However, qualifying employers are still required to provide certain disclosures &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/blogs.duanemorris.com\/techlaw\/2020\/02\/13\/employee-rights-rolled-into-californias-new-consumer-privacy-act-what-employers-should-know\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Employee Rights Rolled Into California&#8217;s New Consumer Privacy Act &#8211; What Employers Should Know&#8221;<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[169,651,613,811,823,633],"ppma_author":[878],"class_list":["post-726","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-california","tag-data-privacy","tag-data-protection","tag-employment","tag-michelle-hon-donovan","tag-sandra-jeskie"],"authors":[{"term_id":878,"user_id":6,"is_guest":0,"slug":"duanemorris3","display_name":"Duane Morris","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/843ff6e7a8fe5fc92109b47a45f34b6cf0ea499e6e788db23456c838b0ae6747?s=96&d=blank&r=g","author_category":"1","last_name":"Sullivan","first_name":"Margaret","job_title":"","user_url":"http:\/\/www.duanemorris.com","description":"<a href=\"http:\/\/www.duanemorris.com\">Visit the Duane Morris website.<\/a>"}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts\/726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/comments?post=726"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts\/726\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/media?parent=726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/categories?post=726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/tags?post=726"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/ppma_author?post=726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}