This article is for administrators.
The California Consumer Privacy Act (CCPA) was signed into law in June 2018 and first took effect on January 1, 2020.
The CCPA imposed regulations on businesses that collect personal data. The law gives consumers the right to:
- Know what personal information has been collected.
- Request the deletion of personal information.
- Opt out of the sale or sharing of personal information.
- Be protected from discrimination when exercising their privacy rights.
What changed?
When the CCPA was first enacted, Employee Data and Business-to-Business Data were exempt from certain requirements.
After the California Privacy Rights Act (CPRA) was enacted, these exemptions remained in effect until January 1, 2023.
Employers who previously did not apply to the employer-employee relationship had to prepare to comply with privacy regulations.
Note: To provide organizations with additional time to make necessary updates, CPRA enforcement began on July 1, 2023. Enforcement applies only to violations that occurred on or after July 1, 2023.
What is a covered business?
A business is considered covered if it is a for-profit entity that collects and controls a California consumer's personal information and meets at least one of the following criteria:
- Had worldwide annual gross revenue exceeding $25,000,000 in the preceding calendar year.
- Alone or in combination, they annually buy, sell, or share the personal information of 100,000 or more California consumers or households, or they derive 50% or more of annual revenues from selling or sharing California consumers’ personal information.
High-level requirements
As of January 1, 2023, covered employers must be prepared to:
- Provide California residents with a specific privacy disclosure notice.
-
Respond to privacy requests from California residents.
- California residents can request a list of their information that was collected.
-
California residents can also request data to be corrected or deleted.
- If the data serves a required business purpose, it is acceptable to deny the request for deletion.
What are Paycor's responsibilities?
Paycor is a service provider as defined by the CPRA. Paycor can assist with specific privacy-related requirements, but it remains the employer's responsibility to comply with the CPRA.
We recommend that you consult your legal advisor to:
- Determine whether the law applies to your organization.
- Evaluate your current data collection practices.
- Establish processes for handling privacy requests and disclosure notices.
As of January 1, 2023, customers can contact Paycor to request assistance with:
- Data collection requests
- Data amendment requests
- Data deletion requests
Requesting assistance from Paycor
- All California employee CCPA requests must be submitted by an authorized customer contact listed on the account.
- Paycor does not handle CCPA requests submitted directly from employees.
- If you receive a CCPA request from an employee, contact the Paycor Support team.
-
After initial contact, Paycor sends an email requesting:
- The CCPA request type
- ATS account name
- The employee’s name
-
CCPA Request types include:
- Data Deletion
- Data Amendment
- Data Report
- After the requested information is provided, the support team manages the request through a support case.
Important notes
- Employers have 45 days from the date a request is received to complete any required action.
- Paycor makes every effort to respond to requests as quickly as possible.
For more information, see the California CCPA Overview and Frequently Asked Questions provided by the California Office of the Attorney General.
Additional resources
- california
- privacy
- cpra
- ccpa
- paycor support
- privacy rights
- california privacy
- consumer privacy
- california privacy rights act (cpra) changes and recruiting
- ccpa
- cpra
- california privacy law
- consumer privacy act
- california privacy rights act
- employee privacy requests
- data deletion request
- data amendment request
- data report
- privacy compliance
- california employee data
- privacy disclosure notice
- service provider responsibilities
- employee data privacy
- california consumer rights
- privacy regulations
Updated: August 28th, 2026 5486 views 0 likes
*This content is for educational purposes only, is not intended to provide specific legal advice, and should not be used as a substitute for the legal advice of a qualified attorney or other professional. The information may not reflect the most current legal developments, may be changed without notice and is not guaranteed to be complete, correct, or up-to-date.