The California Consumer Privacy Act (CCPA) exemptions for employee and business-to-business Personal Information (PI) likely will not be extended. Aug. 31, 2022 was the last day for each house to pass bills, per the California Constitution (Art. IV, Sec 10(c) and the Joint Rules (J.R. 61(b)(18))), and no legislative proposals or amended bills made it to the floor. This means that on Jan. 1, 2023, full consumer rights will apply to the PI of workforce members as well as to their PI collected on behalf of their employer in the context of “providing or receiving a product or service to or from” a business (B2B).
Businesses should assess how consumer rights apply to workforce member and B2B PI, and prepare to provide workforce member and B2B with CCPA or California Privacy Rights Act (CPRA) rights, including the right to know, the right to delete, the right to opt out of the sale or sharing of personal information, the right to limit use and disclosure