As the legislative session came to a close last week, the California Legislature passed five bills that amend the California Consumer Privacy Act ("CCPA"). Here are the five bills that are now headed to the governor for signature:
The exclusions in both A.B. 25 and A.B. 1355 are subject to a one-year moratorium.
Taken together, these bills help clarify ambiguous provisions and focus the potential scope of the CCPA. Of particular importance are the amendments excluding employee data and other businesses' employees for one year from various obligations under the CCPA.
The Legislature also passed a sixth bill, A.B. 1202, which does not amend the CCPA but is likely relevant to many businesses preparing for CCPA compliance. Specifically, this bill creates a new class of data processors, "data brokers," who must register with the attorney general every year.
Businesses that must comply with the CCPA would be wise to anticipate the possibility of these bills becoming law and should consider taking steps now to align their data compliance programs with these amendments in mind.