California Privacy Rights Act (CPRA) Project Checklist + Vendor Addendum

The CPRA substantially expands the privacy and information security obligations of most employers doing business in California. This comprehensive legal framework applies to the personal information of California residents, including employees, job applicants, independent contractors and board members, as well as employees' dependents who receive benefits through the employer. To assist employers with CPRA compliance we have created a checklist which provides covered employers with high-level overview of the action items they need to complete for CPRA compliance.

To assist employers with CPRA compliance we have also created an editable Vendor Addendum that can be attached to employers' existing Service Agreements, to ensure that service providers process personal information consistent with employers' CPRA obligations. This Addendum can be customized to each employer's particular circumstances.