Piecing together the CCPA's opt-in, -out requirements for sensitive personal information
Since all organizations process at least a limited amount of sensitive personal information, such as employee data, Baker McKenzie Partners Helena Engfeldt, CIPP/E, CIPP/US and Justine Phillips write that complying with the California Consumer Privacy Act can "feel like assembling a tedious jigsaw puzzle." They explain the ways companies are lawfully allowed to process sensitive data without triggering the CCPA's opt-in or opt-out requirements.Full story