Privacy Notice at Collection (CCPA/CPRA) for California Employees


Summary

This template is for use by covered employers to comply with the requirements of the California Privacy Rights Act (CPRA) in providing employees with notice describing the personal information collected by the employer and how it is used. This form should be adapted for use with applicants or independent contractors. This template includes practical guidance and drafting notes. [Although "notice at collection" and "privacy policy" are sometimes used interchangeably, they have different requirements. The notice at collection is prospective, while the privacy policy is retrospective, informing the employee of the information collected by the employer in the 12 months prior to the effective date of the policy. CPRA regulations, expected to be finalized in Q4, may provide further clarification on the notice requirements. Before drafting a privacy notice or policy, it is crucial to perform a data mapping exercise. You will need to know what personal data is collected (categories of personal...