The California legislature has passed AB 1281 to the Governor’s desk for signature and, given the absence of legislative opposition, it appears the bill is now well positioned to be signed into law. AB-1281 extends by one year the expiration date of the business-to-business (“B2B”) and employee-related exemptions provided for under the California Consumer Privacy Act (“CCPA”) (previously discussed here). If signed into law, it will give California businesses at least one more year to work on folding employee and B2B data into their existing CCPA compliance programs, a welcome reprieve for California employers facing a resurgence of coronavirus cases in workplaces around the State.
Under the CCPA, the B2B and employee exemptions are currently set to expire on January 1, 2021. If AB 1281 is indeed signed into law, that expiration date will be extended to January 1, 2022. It’s then possible that this expiration date will be extended by one additional year to January 1, 2023 if the proposed ballot measure known as the California Privacy Rights Act of 2020 (“CPRA”) makes it onto the November ballot in California’s general election and passes by a majority vote (we previously discussed the CPRA here and here).
As such, there are three potential scenarios in connection with the B2B and employee exemptions: