How can a business distribute an employee privacy notice to job applicants?

Beginning in 2020, the CCPA required that businesses subject to the Act provide job applicants with a privacy notice that identified (1) the type of personal information collected about California employees and (2) the purpose of the collection.1  Beginning on January 1, 2021, employers are required to include twelve additional topics in privacy notices given to job applicants.

While the CCPA does not dictate the manner in which a privacy notice should be distributed to job applicants, many employers consider using one or more of the following distribution techniques:

  1. Homepage.  Some employers include references to the personal information collected from job applicants in a unified privacy notice posted on the company’s homepage in a persistent footer.
  2. Online application submission form.  Businesses that solicit applications through an online submission form often add a link to the privacy notice that describes the collection of information from job applicants on the form submission page.
  3. Email.  Some employers email a copy (e.g., PDF) of the privacy notice that applies to job applicants to each candidate that submits an application.
  4. URL on paper applications. Some employers that accept paper job applications include a reference to where the applicant can find a full copy of the business’s privacy notice on the paper application form.
  5. Copy on paper applications.  Some employers include a copy of either the full privacy notice, or a short form privacy notice, on any paper application forms.

It is important to note that regardless of the distribution manner selected, if the Modified Proposed Regulations to the CCPA are adopted, an employer should also take steps to make the privacy notice “reasonably accessible” to job applicants with disabilities.2  The Modified Proposed Regulations also imply that if a business elects to distribute a privacy notice in hard copy (e.g., copy on the back of a paper application), it may still need to post an electronic copy of the privacy notice “online.”3