One of the issues NPRC has been following and commenting on is the California Consumer Privacy Act (CCPA).  AB25 recently provided a one-year reprieve of the CCPA for employers/employment context, with the exception of the disclosure requirement, which still applies.  Generally, as of January 2020, the CCPA requires that businesses disclose to all covered persons (generally California residents whose data is collected), the categories of personal information collected and the purposes for which such categories will be used.

The recent AG proposed regulations discuss this and provide relevant guidance. Regulations and related information can be found at https://www.oag.ca.gov/privacy/ccpa.