Complying with data privacy laws in California just got more complicated as the state became the first to have a comprehensive data privacy law covering human resources data.

While employee and job applicant data was formerly exempted from the California Consumer Privacy Act (CCPA), two proposals seeking to extend the exemption when the California Privacy Rights Act (CPRA) goes into effect failed last week. This leaves employers with less than four months to include that information in their compliance plan—and lawyers warn it will be no small feat.