CCPA employment-information exemption and its 2023 sunset (Cal. Civ. Code 1798.145(m)(1)(A), (m)(4))
The CCPA's carve-out for employee and applicant information expired on 1 January 2023, so a business covered by the CCPA owes its California staff the full set of consumer rights over their personal information, including what is in their work email and chat. Licensing that material to an AI developer must therefore be disclosed at collection and handled under the CCPA's sale, opt-out and sensitive-information rules.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(m) (1) This title shall not apply to any of the following: (A) Personal information that is collected by a business about a natural person in the course of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or independent contractor of, that business ... (4) This subdivision shall become inoperative on January 1, 2023.”
Where it was read
Also read from the same source
- California Consumer Privacy Act, definition of sell (Cal. Civ. Code 1798.140(ad)(1))
- California Consumer Privacy Act, transfer in a merger, acquisition or bankruptcy is not a sale (Cal. Civ. Code 1798.140(ad)(2)(C))
- California Consumer Privacy Act, definition of deidentified (Cal. Civ. Code 1798.140(m))
- California Consumer Privacy Act, definition of service provider (Cal. Civ. Code 1798.140(ag)(1))
- California Consumer Privacy Act, right to opt out of sale or sharing (Cal. Civ. Code 1798.120(a))
- California Consumer Privacy Act, right to limit use and disclosure of sensitive personal information (Cal. Civ. Code 1798.121(a))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide