On July 21, 2026, the California Privacy Protection Agency, now branding itself publicly as CalPrivacy, announced that its Audits Division has launched its first formal privacy audit, focused on gig economy platforms operating in California. The audit is the first in a planned series of “sectoral audits” and will evaluate whether major gig platforms are complying with the California Consumer Privacy Act (CCPA), particularly with respect to consumers’ and workers’ rights to access and control personal information.

Although the audit is directed at app-based transportation, delivery, and task-service platforms, the broader message is important for any business collecting applicant, worker, contractor, geolocation, profiling, performance, biometric, communications data, or automated decision-making technology (ADMT) use in California. CalPrivacy’s focus on gig workers also reinforces a point that employers and workforce platforms should not underestimate: California privacy rights apply not only to traditional consumers, but also to employees, job applicants, and independent contractors.