Skip to main content
  • Foundation
  • Executive network
  • CEO Circle
  • SHRM Business
  • Linkage Logo
  • Store
  • Sign In
  • Account
    • My Account
    • Logout
    • Global
    • India
    • MENA
SHRM
About
Book a Speaker
Join Today
Renew
Rejoin Now
Renew
  • Membership
  • Certification
    Certification

    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
      Certification Portal
  • Topics & Tools
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    Events & Education

    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    Community

    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Close
  • Membership
  • Certification
    back
    Certification
    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
      Certification Portal
  • Topics & Tools
    back
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    back
    Events & Education
    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    back
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    back
    Community
    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Join Today
Renew
Rejoin Now
Renew
  • Store
    • Global
    • India
    • MENA
  • About
  • Book a Speaker
  • Foundation
  • Executive network
  • CEO Circle
  • SHRM Business
  • Linkage Logo
SHRM
Sign In
  • Account
    • My Account
    • Logout
Close

  1. Topics & Tools
  2. Employment Law & Compliance
  3. California Location Data Probe: 5 Ways to Safeguard Your Business
Share
  • Linked In
  • Facebook
  • Twitter
  • Email

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus convallis sem tellus, vitae egestas felis vestibule ut.


Error message details.

Copy button
Reuse Permissions

Request permission to republish or redistribute SHRM content and materials.


Learn More
News

California Location Data Probe: 5 Ways to Safeguard Your Business

April 14, 2025 | Darcey M. Groden, Usama Kahf, and Chelsea Viola © Fisher Phillips

A large data center

A new California investigative sweep into the location data industry focuses on whether businesses have violated state law relating to the consumers’ right to limit how their personal information — including their geolocation data — is used. This California Consumer Privacy Act (CCPA) enforcement initiative, announced on March 10, is part of broader state efforts to crack down on businesses that rely on location tracking. We’ll explain what’s happening and give you five proactive steps to comply with the CCPA’s stringent requirements and avoid getting dinged in the sweep.

Quick Overview

California Attorney General Rob Bonta recently announced an investigative sweep into whether location data businesses (such as advertising networks, mobile app providers, and data brokers) subject to the CCPA offer and implement consumers’ right to stop the sale and sharing of personal information, particularly when it is geolocation data. Bonta highlighted growing concerns about the potential misuse of location data, and his March 10 announcement came just days after California lawmakers introduced Assembly Bill 1355 — a bill that, if passed, would establish strict parameters for employee geolocation tracking technologies.

5-Step Action Plan for California Businesses Subject to the CCPA

Conduct a comprehensive audit of website cookies and tracking technologies. Many businesses are unaware of the full scope of tracking technologies embedded in their websites, often underestimating the extent to which these tools collect and share user data. Even if carefully set up, tracking technologies may have data leakage — that is, they may be sending information to third parties without the business’s knowledge. Moreover, over time, tracking mechanisms can accumulate from various sources, whether integrated by external vendors or left behind by outdated or forgotten company initiatives. Without comprehensive monitoring and oversight, businesses may unknowingly expose consumer data to third parties, increasing compliance risks under the CCPA and litigation risks under the California Invasion of Privacy Act (CIPA).

To mitigate these risks and maximize compliance, businesses should conduct a comprehensive audit of their website’s tracking technologies and consent mechanism (also known as consent management platform or CMP). This process helps to:

  • Identify all first- and third-party cookies and tracking mechanisms in use, including those embedded within analytics tools and plug-ins.
  • Assess (and test) what information these tools collect, not just what you think they are supposed to be collecting.
  • Eliminate any unnecessary or unauthorized tracking technologies that no longer serve a business purpose, reducing the risk of inadvertent data sharing and potential legal exposure.
  • Determine the proper classification of cookies as essential or nonessential.
  • Test whether your CMP is doing what it’s supposed to be doing (i.e., that the privacy choices users select on a cookie banner actually work).

Limit data collection to only what is necessary. Data minimization — the concept that businesses should only collect data that is strictly necessary and proportionate to accomplish the purposes for which the data is collected — is a fundamental principle underscoring the CCPA. Businesses subject to the CCPA must take a strategic and purpose-driven approach to data collection because indiscriminate data collection could increase regulatory and legal exposure and could also erode the trust of clients and customers. To ensure that your business is collecting only what is essential to deliver and provide its products and services, you should:

  • Tailor data collection to your business model and user demographics. Different industries and user bases require different types of data. For example, an e-commerce platform may need shipping addresses, but a purely informational blog post may not require any location tracking at all. Businesses should critically assess whether the data they collect, including geolocation data, aligns with their core functions and target audience.
  • Exercise heightened caution when handling sensitive personal information. In the context of location tracking under the CCPA, sensitive personal information means the location of an individual within approximately 0.38 square miles. Businesses should assess whether the data they collect through cookies falls within this category and determine whether there is a clear, legitimate, and legally justifiable reason for doing so. Even when collection is necessary, companies must implement strong safeguards to prevent unauthorized access, misuse, or exploitation.
  • Think holistically about what a user’s interaction with your business can communicate. Tracking technologies that can trace people across different websites and build profiles on them may collect a myriad of other sensitive personal information — including health-related information, sexual orientation, immigration status, and religious belief. Businesses need to take a holistic approach to data collection, considering not just the specific data points collected, but whether even disclosure of the fact the user visited your website, app, or specific subparts within it may itself disclose sensitive personal information about the user.

Implement a robust cookie management process. Cookies are small data files stored on a user’s device that help websites remember preferences and track browsing history. While some cookies are essential for website functionality, others collect personal data for analytics, marketing, or third-party sharing. Under the CCPA, businesses must provide consumers with clear and meaningful choices about how their data is being used. To ensure compliance with the CCPA, businesses should:

  • Implement a user-friendly mechanism for opting out of nonessential cookies. This ensures that consumers can easily control their data preferences.
  • Ensure that cookie consent banners and preference settings comply with regulatory requirements. This includes providing clear opt-in and opt-out choices that meet all necessary legal standards. Your website should not require users to take more steps to reject cookies than to accept them (read more about the use of “dark patterns” here).

Regularly test and audit your cookie compliance mechanisms. Implementing opt-out mechanisms and consent banners alone is not enough — businesses must actively ensure these tools function correctly and that third-party partners adhere to data privacy obligations. Regular testing and audits help prevent compliance gaps, reduce legal risk, and maintain consumer trust. Businesses should:

  • Conduct periodic technical audits to verify opt-out functionality. Regularly test cookie consent tools to ensure consumers can effectively opt out of nonessential cookies and that their preferences are properly honored.
  • Confirm third-party vendor and advertising partner compliance. Review agreements and data-sharing practices to ensure external partners meet contractual and regulatory data privacy obligations. Failure to ensure compliance can expose businesses to legal and financial risks, making it essential to proactively monitor and address any potential issues.
  • Implement automated monitoring tools to detect unauthorized tracking. Use technology to continuously scan for unapproved data collection and third-party scripts that may violate privacy policies or legal requirements. Detecting and addressing these risks proactively helps mitigate any potential noncompliance.

If you receive a letter from the attorney general, call an attorney. The attorney general announced that his office will initiate this investigative sweep by sending inquiry letters to advertising networks, mobile app providers, and data brokers and requesting information from them. Receiving such a letter can be a scary proposition. But don’t panic! Legal counsel can help you respond to any such inquiry you may receive. Counsel can help you assess your current state of CCPA compliance and respond to any inquiry in a manner that best protects your business. 

Conclusion

The California attorney general’s investigation signals an increasing regulatory focus on location tracking, making it critical for businesses to proactively ensure compliance with the CCPA. Companies must address potential risks posed by outdated tracking technologies, excessive data collection, and inadequate consumer opt-out mechanisms to avoid inadvertent violations. Now is the time to review compliance measures and implement necessary changes.

Darcey M. Groden is an attorney at Fisher Phillips in San Diego. Usama Kahf is an attorney at Fisher Phillips in Irvine, Calif. Chelsea Viola is an attorney at Fisher Phillips in Los Angeles.

Employment Law & Compliance

Artificial Intelligence in the Workplace

​An organization run by AI is not a futuristic concept. Such technology is already a part of many workplaces and will continue to shape the labor market and HR. Here's how employers and employees can successfully manage generative AI and other AI-powered systems.



Related Content

Kelly Dobbs Bunting speaks onstage at SHRM24
(opens in a new tab)
News
Why AI+HI Is Essential to Compliance

HR must always include human intelligence and oversight of AI in decision-making in hiring and firing, a legal expert said at SHRM24. She added that HR can ensure compliance by meeting the strictest AI standards, which will be in Colorado’s upcoming AI law.

(opens in a new tab)
News
A 4-Day Workweek? AI-Fueled Efficiencies Could Make It Happen

The proliferation of artificial intelligence in the workplace, and the ensuing expected increase in productivity and efficiency, could help usher in the four-day workweek, some experts predict.

(opens in a new tab)
News
How One Company Uses Digital Tools to Boost Employee Well-Being

Learn how Marsh McLennan successfully boosts staff well-being with digital tools, improving productivity and work satisfaction for more than 20,000 employees.

HR Daily Newsletter

Stay up to date with the latest HR news, trends, and expert advice each business day.

Success title

Success caption

Manage Subscriptions
  • About SHRM
  • Careers at SHRM
  • Press Room
  • Contact SHRM
  • Book a SHRM Executive Speaker
  • Advertise with Us
  • Partner with Us
  • Copyright & Permissions
  • Post a Job
  • Find an HR Job
Follow Us
  • LinkedIn
  • Facebook
  • Twitter
  • Instagram
  • YouTube
  • SHRM Newsletters
  • Ask An Advisor

© 2025 SHRM. All Rights Reserved

SHRM provides content as a service to its readers and members. It does not offer legal advice, and cannot guarantee the accuracy or suitability of its content for a particular purpose. Disclaimer


  1. Privacy Policy

  2. Terms of Use

  3. Accessibility

Join SHRM for Exclusive Access to Member Content

SHRM Members enjoy unlimited access to articles and exclusive member resources.

Already a member?
Free Article
Limit Reached

Get unlimited access to articles and member-exclusive resources.

You've reached the limit of 1 free article this month. Join to access unlimited articles and member-only resources.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join the Executive Network and enjoy unlimited content.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join and enjoy unlimited access to SHRM Executive Network Content.

Already a member?
Unlock Your Career with SHRM Membership

Please enjoy this free resource! Join SHRM for unlimited access to exclusive articles and tools.

Already a member?

Your membership is almost expired! Renew today for unlimited access to member content.

Renew now

Your membership has expired. Renew today for unlimited access to member content.

Renew Now

Your Executive Network membership is nearing its expiration. Renew now to maintain access.

Renew Now

Your membership has expired. Renew your Executive Network benefits today.

Renew Now