The CCPA applies to personal information held about “consumers” – a term which is defined as referring to any resident of California.1 As a result, if a business is governed by the CCPA rights conferred by the statute – including the right to receive a privacy notice -- apply to any beneficiaries, dependents, and emergency contacts of employees who are California residents.
It is important to note that the CCPA phased in the amount of information required to be disclosed in a privacy notice to beneficiaries, dependents, and emergency contacts of employees. Specifically, privacy notices theoretically had to be provided to such individuals as of January 1, 2020 that identified (1) the type of personal information collected about California beneficiaries, dependents and emergency contacts, and (2) the purpose of the collection.2 The statute did not require that an additional twelve topics be included in privacy notices that were intended to go to “emergency contacts”3 and other “personal information that is necessary for the business to retain to administer benefits . . . relating to [a] natural person acting as a . . . employee” until January 1, 2021, so long as such information “is collected and used solely within the context of administering those benefits.”4
