California Consumer Privacy Act: exemptions.

Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to require the business to delete personal information about the consumer, as specified. Existing law provides that the obligations the CCPA imposes on businesses shall not restrict a business' ability to, among other things, comply with state law. Existing law, the California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election (Proposition 24) , amended, added to, and reenacted the CCPA. The CCPA, as amended by Proposition 24, provides that certain exemptions to obligations imposed on businesses by specified provisions of the CCPA would expire on January 1, 2023. Existing law, until January 1, 2023, exempts from certain provisions of the CCPA personal information reflecting a communication or a transaction between the business and a company, partnership, sole proprietorship, nonprofit, or government agency that occur solely within the context of the business conducting due diligence or providing or receiving a product or service. Existing law also exempts personal information that is collected and used by a business solely within the context of having an emergency contact on file, administering specified benefits, or a person's role or former role as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or an independent contractor of that business. This bill would extend those above-described exemptions until January 1, 2026. This bill would declare that its provisions further the purposes and intent of Proposition 24.