Employee rights under the CPRA

When the California Privacy Rights Act (CPRA) passed on November 3, 2020, it extended the California Consumer Privacy Act’s (CCPA) employee information exemption until January 1, 2023.

The CPRA also extends a new set of rights for employees beyond the right to know and a right to private action in the event of a breach of unencrypted data. This will present a unique set of challenges for organizations that will need to understand what data they hold on their employees and where that data is stored, taking into account the CPRA’s lookback period that begins on January 1, 2022.

Organizations will need to prepare for this new scope of data and enhanced employee rights ahead of the CPRA’s 2023 effective date.

This infographic outlines key facts around the CPRA’s employee rights, the new rights that the CPRA extends to employees, and key information relating to each of the rights.

Follow OneTrust on LinkedInTwitter, or YouTube for the latest on CCPA, CPRA, and California privacy.

On-demand webinar coming soon...

You may also like


Privacy Management

The road to privacy compliance: A spotlight on Oregon & Delaware legislation

We explore the new Oregon and Delaware privacy laws, how they differ from other US privacy laws, and what they mean for your business.

September 14, 2023

Learn more

Regulation Book

Privacy Management

Utah Consumer Privacy Act law book

Download the Utah Consumer Privacy Act law book and have the official UCPA text at your fingertips for when the law takes effect on December 31, 2023.

September 04, 2023

Learn more


Privacy Management

The road to 50 states: Delaware and Oregon join the US privacy landscape

Get in-depth analysis on two upcoming US Privacy laws, the Oregon Consumer Privacy Act (OCPA) and the Delaware Personal Data Privacy Act (DPDPA), with OneTrust DataGuidence and a panel of experts.

August 10, 2023

Learn more