Since T states in their mandatory privacy courses that they comply with California laws, they may want to check out some of these.
State-Specific Protections (Example: California)
California provides some of the strongest protections through the California Privacy Rights Act (CPRA):
employeesfirstlaborlaw.com
employeesfirstlaborlaw.com
Disclosure: Employers must disclose what data they collect and how it is used.
Right to Access: Employees may have the right to access and correct the data collected about them.
Retaliation: Employers are prohibited from retaliating against employees who exercise their privacy rights