The Colorado Attorney General wasn't the only one focused on privacy last week. The California Attorney General has sent its own set of notices out to large California employers requesting information on the companies’ compliance with the CCPA with respect to the personal information of employees and job applicants. 

Companies with California employees should be prepared to demonstrate how they have provided notices of their privacy practices to employees and the steps they have taken internally to respond to employee requests to exercise privacy rights. As a reminder, the CPPA also has audit rights, which can be used to request information on internal compliance program. Now, more than ever, companies should be taking steps to make sure that they are not only complying with the law, but that they can document their compliance and be prepared to provide evidence to regulators upon request.