---
title: "California Privacy Legislation Round-Up: Gov. Newsom Signs CCPA Employee Exemption Extension, Vetoes Others"
date: 2020-10-01T22:16:56-04:00
author: Import Bot
canonical_url: "https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/california-privacy-legislation-round-up-gov-newsom-signs-ccpa-employee-exemption-extension-vetoes-others"
section: Blog Posts
---
# California Privacy Legislation Round-Up: Gov. Newsom Signs CCPA Employee Exemption Extension, Vetoes Others

  October 1, 2020

 

 

 

 

 

 

Prior to the September 30 deadline to sign or veto legislation, California Governor Gavin Newsom recently took action on three bills related to data privacy. Bringing some potential certainty to the dynamic CCPA landscape, Governor Newsom signed into law [AB 1281](http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201920200AB1281http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201920200AB1281), which provides for the extension of the CCPA’s exemptions related to employee data until January 1, 2022. In 2019, the Legislature [exempted](https://www.adlawaccess.com/2019/09/articles/ccpa-update-legislature-amends-the-ccpa-to-exclude-employee-data-b2b-communications-for-one-year/) from the CCPA collection of personal information from job applicants, employees, business owners, directors, officers, medical staff, and contractors until January 1, 2021. Notably, AB 1281 only goes into effect if California voters do *not* approve the [California Privacy Rights Act](https://www.adlawaccess.com/articles/privacy-and-information-security/california-privacy-rights-act-cpra/) (CPRA) ballot initiative on November 3rd.

However, Governor Newsom vetoed two other privacy bills that would have tightened data- and service-specific regulations beyond the CCPA’s standards. Citing the risk of unintended consequences during the COVID-19 pandemic, Governor Newsom nixed [SB 980](https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201920200SB980), which would have created heightened privacy and security requirements for genetic data handled by direct-to-consumer genetic testing and analysis companies. Instead, Governor Newsom [directed](https://www.gov.ca.gov/wp-content/uploads/2020/09/SB-980.pdf) the state’s Health and Human Services Agency and Department of Public Health to work with the Legislature to identify ​“a solution that achieves the privacy aims of the bill while preventing inadvertent impacts on COVID-19 testing efforts.”

The second vetoed bill, [AB 1138](https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201920200AB1138), would have required companies that offer ​“social media” services to obtain parental consent before allowing a user who companies actually know to be under the age of 13 to create an account. In his [veto message](https://www.gov.ca.gov/wp-content/uploads/2020/09/AB-1138.pdf), Governor Newsom explained that AB 1138 ​“would not meaningfully expand protections for children,” but indicated that he is ​“open to exploring ways to build upon current law to expand safeguards for children online.”

Privacy developments in California this year are unlikely to end with the Legislature’s session. As we have [discussed](https://www.adlawaccess.com/2020/06/articles/on-june-24-2020-the-secretary-of-state-of-california-announced-that-the-california-privacy-rights-act-cpra-had-enough-votes-to-be-eligible-for-the-november-2020-general-election-ballot/), the November 3rd vote on CPRA could have far-reaching implications for California privacy law. With the election only 33 days away, we will continue to monitor and post relevant updates.

 

 **Tags:** [California Privacy Rights Act (CPRA)](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/tags/california-privacy-rights-act-cpra)

 

 - Share this entry 
    - 
    - 
    - 
    -
- [  View entry pdf ](https://s3.amazonaws.com/cdn.kelleydrye.com/content/uploads/pdf-snapshots/california-privacy-legislation-round-up-gov-newsom-signs-ccpa-employee-exemption-extension-vetoes-others-20250925122940.pdf)
 
 

### Search Blog

  

### Subscribe

  

### Explore Topics

- [California Privacy Rights Act (CPRA)](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/california-privacy-rights-act-cpra)
- [Privacy and Information Security](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/privacy-and-information-security)
 
 

### Related Services

- [Advertising and Marketing](https://www.kelleydrye.com/practices/advertising-and-marketing)