What happened
EPIC counsel Mayu Tobin‑Miyaji says unions’ concerns are valid and highlights the absence of a private right of action, leaving enforcement of worker data protections dependent on state attorneys general. She notes that without such a right, AGs may lack resources to investigate every lead.
Why it matters for trust and compliance
- Its status is pending. The case is still open; the outcome may change what it means.
- The lack of a private right of action could hinder enforcement against the sale of employee data for AI training.
Who is affected
technology controller processor Google Electronic Privacy Information Center Electronic Privacy Information Center (EPIC)
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Inventory where this data is shared or sold and whether opt-outs are honoured.
- Inventory AI or automated decision systems in scope and their assessments.