Employee Privacy Law CCPA

[rkrossman]

The California legislature passed the California Consumer Privacy Act in June of 2018 to address growing consumer concerns about data protection and provide California consumers with important controls over their personal information. The CCPA will go into effect on January 1, 2020 and provides the following:

Right to access information – Consumers in California will be able to know the “what, who, and why” surrounding their personal information. Specifically, they can request the following, which must be provided in a portable format:

• Which categories of personal information were collected, shared, or sold
• Categories of sources from which this personal information was collected, with whom it was shared, and to whom it was sold to
• The specific pieces of personal information it has collected about that consumer
• Why the personal information was collected

Right to deletion – Consumers in California will be able to request that a company delete the personal information it has collected about them.

Right to opt out – Consumers in California will be able to direct a company to not sell their personal information to third parties. It’s also important to note that the definition of “sell” in the bill is broader than simply monetary exchange.

Does SAP plan to provide a solution to address this and other Employee data privacy laws such as the General Data Protection Regulation passed in the European Union? We need to be able to have a way to exclude Employees who request we not share their data and also have a way to delete Employee data if requested.