- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
Do current employees need to be given a privacy notice?
Yes.
A privacy notice typically discloses the following information to the public:
- The categories of information collected from a data subject directly and from third parties about a data subject,
- The purpose for which information is collected and used,
- The extent to which the business tracks or monitors data subjects,
- The extent to which the business shares the data subject’s information with third parties,
- The standard by which the business protects the information from unauthorized access,
- The ability (if any) of a data subject to request access to their information,
- The ability (if any) of a data subject to request the deletion of their information,
- The ability (if any) of a data subject to request the rectification of inaccurate information, and
- The process by which a business will inform data subjects about changes in its privacy practices.
While the CCPA requires that a business that collects a consumer’s personal information about its employees disclose the first two categories of information “at or before the point of collection,” it does not require that all of the information typically contained in a privacy notice be disclosed to the employee at that time.1