Employee and Business-to-Business (B2B) personal information exemptions under the California Consumer Privacy Act (CCPA) will expire on January 1, 2023. Under the current exemptions, covered businesses do not have to comply with certain requirements when processing personal information collected in the employment or B2B context. Businesses can take five key steps to extend their CCPA compliance programs to include personal information for employees and B2B contacts, including data mapping, updating sensitive information processes, updating data processing agreements, extending data subject rights procedures to cover employees and B2B data and prepare for requests, and conduct training specific to the upcoming changes.
