If a business receives an access request, does it have to provide information that it collected more than a year ago about the consumer?

Can a company be sued under the CCPA for failing to honor an access request?

If a company receives a data access request from an employee, will it have to share with them performance reviews and other notes and comments in their HR file that implicate other employees?

Access Requests – the right to access data