A discussion of steps employers can take in advance of the CRPA compliance deadline, including building a CPRA compliance team, data retention, vendor management and watching for other state law developments.
A discussion of new vendor contracting issues related to the CPRA, such as both requirements and recommendations for provisions to be included in the necessary addenda to vendor or service agreements.
The “Purge Rule,” retention schedules, and data breach risk. Kwabena Appenteng explains what could be the most burdensome compliance requirements for employers.
This podcast episode covers the big change for employers with respect to information security under the CPRA – the new, affirmative obligation on employers to implement reasonable security policies and practices.