PrivacySignal
News

Invitation for Preliminary Comments - Notices & Disclosures and Employee Data

California Privacy Protection Agency (CPPA) (.gov) · · US / State · Privacy Law

The California Privacy Protection Agency is soliciting early public input on two areas: how businesses communicate privacy notices and disclosures, and how employee data is handled under California privacy law. The pre-rulemaking step signals the CPPA is laying groundwork for future regulatory action in both areas.

Why this matters: Most privacy law debates center on consumers. Employee data is different. Workers often have no real choice about what their employer collects. They cannot opt out, shop around, or walk away without losing their job. California is one of the few places where that imbalance is being taken seriously at the regulatory level. If you handle HR data, run payroll systems, or monitor staff in any way, this process is worth watching. What the CPPA hears now will shape what compliance looks like later.

Who should care: General readers · Privacy officers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

News
Inside Privacy (Covington) · · International

CISA Submits Final CIRCIA Rule for OMB Review

On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before the Final Rule will be... Continue Reading…

Who should care: Lawyers · Compliance

#regulation Read original →
News
WIRED — AI · · International

Inside Elon Musk’s Midterm Spending Spree

This week on “Uncanny Valley,” we discuss where Elon Musk’s PAC is spending millions, the latest ideology Trump claims is dangerous, and the backlash against the designer behind Muse’s logo.

News
EFF — Deeplinks · · International

When No ID Means No Internet: Age Verification and the Right to Access Information

This post was co-authored by Sheila B. Lalwani, a doctorate student and recent COMPASS Fellow hosted by EFF. Age verification proposals are often presented as a simple tradeoff: sacrifice a little privacy to better safeguard children online. But that framing overlooks a more fundamental question. What happens to people who cannot verify their age at all? This is particularly a problem when users are required to prove their age with identity documents. Age-related restrictions are developing quickly around the world. While they differ radically across jurisdictions, in the past year, we’ve wit…

Who should care: General readers · Privacy officers · Policy