The California Privacy Protection Agency has reached a $1.35 million settlement with Tractor Supply Co. over alleged violations of the California Consumer Privacy Act. This marks the largest fine ever issued by the agency.
The CCPA requires businesses to inform all “consumers” — a term that includes employees and job applicants — of their privacy rights. These rights include knowing what personal information the business collects, how it is used or shared, and the ability to request correction or deletion.
While most violations in this case involved the company’s failure to provide adequate notices to traditional consumers and honor their opt-out requests, the settlement also addressed the company’s failure to inform job applicants of their CCPA rights and how to exercise them.
Although the CCPA is often associated with consumer data, this enforcement action underscores that employers also must comply with CCPA requirements for applicants and employees, and that failure to do so can result in substantial penalties.
Members of the Center for Workplace Compliance (CWC), our affiliated nonprofit membership association, can read more here.