Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Data Counsel

CMMC … Where Do I Even Begin? Scratching the Surface with Audit Preparation

AD Nauseam

AD Nauseam: False Advertising on Trial – Inside the Intuit Decision

California Privacy Protection Agency Solicits Public Comments on Employee Data Requirements

Theodore Kobus, Craig Hoffman, Joseph Bruemmer Selected for Cybersecurity Docket’s Incident Response 50

core/heading

The California Privacy Protection Agency is considering new regulations that would clarify how the California Consumer Privacy Act (CCPA) applies to employees, job applicants and independent contractors.

core/list-item

These regulations may better align the CCPA’s requirements with the ways in which businesses handle data about workers but also risk increasing regulatory burden for employers.

The Agency has requested pre-rulemaking comments from the public, including to better understand the challenges businesses currently face in providing CCPA rights to workers.

core/list

The California Consumer Privacy Act (CCPA) remains uniquely positioned as the only U.S. state comprehensive privacy law that regulates the personal data of employees, job applicants and independent contractors. Since the scope of the CCPA was expanded to this population in January 2023, employers subject to the CCPA have grappled with challenges and ambiguities in applying a consumer privacy law to their workforce.

core/paragraph

On April 20, the California Privacy Protection Agency (CalPrivacy or the Agency) initiated <a href="https://cppa.ca.gov/regulations/pdf/notices_disclosures_employee_data.pdf">preliminary rulemaking</a> focused on employee data, as well as privacy notices and disclosures, under the CCPA. The Agency is specifically exploring whether special regulations should be adopted to detail how the CCPA should apply to personal information about employees, job applicants and independent contractors – perhaps recognizing confusion among both workers and industry. For example, the Agency is soliciting feedback to questions such as: “What challenges do businesses experience when providing job applicants and employees with the ability to exercise their privacy rights? How can the regulations address this issue?”

Potential impacts from this rulemaking may include different or additional requirements for California privacy notices and, as concerns employees, a different set of regulations from those governing consumer personal information. While it is too early to predict specific substantive changes in the rules, if CalPrivacy proceeds with formal rulemaking on employee personal information, it has the potential to better align the CCPA’s requirements with the ways in which businesses handle data about workers. On the other hand, it may also result in additional requirements and regulatory burden for employers.

The rulemaking is currently at an early, pre‑proposal stage in which CalPrivacy is seeking broad input from consumers, employees and businesses on a number of topics. CalPrivacy is accepting preliminary comments through <strong>May 20</strong>,<strong> 2026</strong>, after which it may decide whether to advance formal proposed regulations. If the Agency proceeds, draft regulations and a separate public comment period would follow, with final requirements not expected to take effect until sometime in 2027 at the earliest. We are actively monitoring this rulemaking and would be happy to discuss what it could mean for your existing privacy notices, human resources data practices and broader CCPA compliance program. If you would like to discuss strategies relating to the submission of preliminary comments or have any questions, please contact <a href="https://www.bakerlaw.com/professionals/justin-t-yedor/">Justin Yedor</a> or <a href="https://www.bakerlaw.com/professionals/jennifer-l-mitchell/">Jennifer Mitchell</a>.

Related Services

Featured Insights