Skip Repeated Content

The CCPA defines the term “personal information” to include any information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.”1 Based upon the broad definition, employers often collect the following types of personal information about employees: 

  • Benefits elections.
  • Correspondence to/from the employee and the employer.
  • Correspondence to/from the employee and other employees.
  • Correspondence to/from the employee and customers or clients of the employer.
  • Complaints made about the employee.
  • Complaints made by the employee.
  • Disciplinary actions and related investigation files..
  • Employment eligibility verification information (e.g., I-9, Social Security Number).
  • Job application.
  • Pay details (e.g., direct deposit information).
  • Pay history.
  • Performance reviews.
  • Personnel files.
  • Salary and salary history.
  • Time and attendance.

For more information and resources about the CCPA visit http://www.CCPA-info.com.


This article is part of a multi-part series published by BCLP to help companies understand and implement the General Data Protection Regulation, the California Consumer Privacy Act and other privacy statutes.  You can find more information on the CCPA in BCLP’s California Consumer Privacy Act Practical Guide, and more information about the GDPR in the American Bar Association’s The EU GDPR: Answers to the Most Frequently Asked Questions.

1. CCPA, Section 1798.140(o)(1).

This document provides a general summary and is for information/educational purposes only. It is not intended to be comprehensive, nor does it constitute legal advice. Specific legal advice should always be sought before taking or refraining from taking any action.