Workplace surveillance tools.
What changed between versions
The regulated entity changed from 'employer' (which included all branches of state government, counties, cities, school districts, and other public entities) to 'business' (a for-profit legal entity employing more than 100 people that does business in California). This excludes government employers and small businesses from the requirements.
The definition of 'employer' (which covered public and private entities exercising control over workers) was replaced with a definition of 'business' limited to for-profit organizations with more than 100 employees operating in California.
The annual notice content was restructured. The old version required detailed information about tool creators, vendors, model descriptions, significant updates, consumer impact, opt-out options, and third-party access. The new version requires a simpler list: tools used, categories of information collected, purpose, use, retention period, whether data is sold or shared, industry type, and unionization status.
A new requirement was added that the business must send the annual notice directly to its employees and any union representing those employees.
A civil penalty of $500 per violation was added for businesses that fail to comply with the part's requirements.
A legislative reporting requirement was added: by January 1, 2029, the Department of Industrial Relations must submit a report to the Legislature compiling all notices, including breakdowns by industry type, unionization status, and corporate profit generated from selling worker data. The section sunsets on January 1, 2033.
Section numbering was renumbered: Part 5.7 now begins at Section 1560 instead of Section 1550, with the notice requirement moving from Section 1551 to Section 1561.