Bill Full Text
Home
-
Bills
-
Bill
-
Authors
-
Dates
-
Locations
-
Analyses
-
Organizations
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__200699INT</ns0:Id>
<ns0:VersionNum>99</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2026-02-17</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>2006</ns0:MeasureNum>
<ns0:MeasureState>INT</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Michelle Rodriguez</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Michelle Rodriguez</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to amend Section 11019.9 of the Government Code, relating to state government.</ns0:Title>
<ns0:RelatingClause>state government</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>State agencies: privacy policy.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>Existing law requires each state department and state agency to enact and maintain a permanent privacy policy, in adherence with the Information Practices Act of 1977 and according to prescribed principles. Existing law requires each state department and state agency to conspicuously post, as defined, its privacy policy on its internet website.</html:p>
<html:p>This bill would make nonsubstantive changes to those provisions.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>NO</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_429AA539-76EF-45B3-B996-DF0440A9341D">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:type="locator" ns3:href="urn:caml:codes:GOV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'2.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'CHAPTER'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'ARTICLE'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'11019.9.'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 11019.9 of the
<ns0:DocName>Government Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_844AFD7E-66FC-4927-A0DB-55DD30287419">
<ns0:Num>11019.9.</ns0:Num>
<ns0:LawSectionVersion id="id_43A88BF7-9F7A-4836-96BD-4E44A5567517">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
Each state department and state agency shall enact and maintain a permanent privacy policy, in adherence with the Information Practices Act of 1977 (Chapter 1 (commencing with Section 1798) of Title 1.8 of Part 4 of Division 3 of the Civil Code). Each state department and state agency shall conspicuously post its privacy policy on its
internet website.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
The privacy policy required by subdivision (a) shall include, but is not limited to, the following principles:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Personally identifiable information is only obtained through lawful means.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The purposes for which personally identifiable data are collected are specified at or before the time of collection, and any subsequent use is limited to the fulfillment of purposes not inconsistent with those purposes previously specified.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Personal data shall not be disclosed, made available, or otherwise used for purposes other than those specified, except with the consent of the subject of the data, or as authorized by law or regulation.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
Personal data collected must be relevant to the purpose for which it is collected.
</html:p>
<html:p>
(5)
<html:span class="EnSpace"/>
The general means by which personal data is protected against loss, unauthorized access, use modification, or disclosure shall be posted, unless that disclosure of general means would compromise legitimate state department or state agency objectives or law enforcement purposes.
</html:p>
<html:p>
(6)
<html:span class="EnSpace"/>
Each state department or state agency shall designate a position within the department or agency, the duties of which shall include, but not be limited to, responsibility for the privacy policy within that department or agency.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
For
purposes of this section, the term “conspicuously post” shall include posting the privacy policy through any of the following means:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
An internet webpage on which the actual privacy policy is posted if the internet webpage
is the homepage or first significant page after entering the internet website.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
An icon that hyperlinks to an internet webpage on which the actual privacy policy is posted, if the icon is located on the homepage or the first significant page after entering the internet website, and if the icon contains the
word “privacy.” The icon shall also use a color that contrasts with the background color of the internet webpage or is otherwise distinguishable.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
A text link that hyperlinks to an internet webpage on which the actual privacy policy is posted, if the text link is located on the homepage or first significant page after entering the internet
website, and if the text link does any of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
Includes the word “privacy.”
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Is written in capital letters equal to or greater in size than the surrounding text.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
Is written in larger type than the surrounding text or in contrasting type, font, or color to the surrounding text of the same size, or is set off from the surrounding text of the same size by symbols or other marks that call attention to the language.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
Any other functional hyperlink that is so displayed that a reasonable person would notice it and understand it to hyperlink to the actual privacy policy.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>