Yes, the CPRA applies to employee data. In practice, this means employees get the same rights and protections as consumers in how their data is collected, processed, secured, and retained.