Business Law Journal

In an eleventh-hour ruling made shortly before enforcement of the California Privacy Rights Act’s regulations was set to begin on July 1, a California judge has delayed enforcement until March 29, 2024.  The delay reduces the pressure on businesses who had been facing potential enforcement of unfinalized regulations.  However, the ruling is not a complete reprieve as the delay does not affect enforcement of the statute itself which can still be enforced as of July 1 by both the California Privacy Protection Agency (“CPPA”) and the California Department of Justice.  

[This is the first in a series of blog posts on how businesses should prepare for the California Privacy Rights Act which will enter into force on January 1, 2023]

Although since January 1, 2020, the California Consumer Privacy Act (“CCPA”) has required covered businesses (as defined below) to provide notice to California employees and job applicants regarding the types of personal information that a business collects, certain key employee exemptions previously limited the privacy-related requirements for employers and corresponding rights of employees and job applicants.  However, those exemptions are set to expire on January 1, 2023.