Bill Full Text
Home
-
Bills
-
Bill
-
Authors
-
Dates
-
Locations
-
Analyses
-
Organizations
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__202199INT</ns0:Id>
<ns0:VersionNum>99</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2026-02-17</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>2021</ns0:MeasureNum>
<ns0:MeasureState>INT</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Schiavo</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Schiavo</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to amend Sections 1798.155, 1798.160, and 1798.199.55 of, and to add Sections 1798.141, 1798.199.101, 1798.199.102, 1798.199.103, 1798.199.104, and 1798.199.105 to, the Civil Code, relating to privacy.</ns0:Title>
<ns0:RelatingClause>privacy</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>California Consumer Privacy Act of 2018: whistleblower complaints.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>The California Consumer Privacy Act of 2018 (CCPA) grants to a consumer various rights with respect to personal information, as defined, that is collected by a business, as defined, including the right to request that a business delete personal information about the consumer that the business has collected from the consumer. The California Privacy Rights Act of 2020, an initiative measure approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. The CCPA establishes the California Privacy Protection Agency with full administrative power, authority, and jurisdiction to implement and enforce the CCPA. The CCPA law makes a business, service provider, contractor, or other person that violates the CCPA liable for an administrative fine, as provided.</html:p>
<html:p>The CCPA creates the
Consumer Privacy Fund in the State Treasury and makes moneys in the fund available upon appropriation by the Legislature. Existing law requires 95% of any administrative fine assessed, and of the proceeds of any settlement, to be deposited into the Consumer Privacy Subfund, which is created within the Consumer Privacy Fund. The CCPA law requires the funds to be used exclusively by the agency in carrying out its duties under the CCPA. The CCPA requires the other 5% of any administrative fine, and of the proceeds of any settlement, to be deposited into the Consumer Privacy Grant Subfund, also within the Consumer Privacy Fund, to be used exclusively by the agency to administer and distribute grants to promote and protect consumer privacy, as provided.</html:p>
<html:p>This bill would authorize a person to submit to the agency, a whistleblower complaint, as defined, and would make the whistleblower eligible for an award if the agency designates a complaint for administrative enforcement
and certain requirements are met. The bill would require an eligible whistleblower to receive at least 15% but not more than 33% of the fines collected through an administrative enforcement action or settlement, calculated after the allocation to Consumer Privacy Grant Subfund described above. The bill would require the agency to consider certain factors in determining the amount of the award. The bill would additionally authorize the agency to assess an administrative penalty against a person who violates the CCPA in an amount to cover the reasonable attorney’s fees of the whistleblower.</html:p>
<html:p>This bill would create the Consumer Privacy Whistleblower Subfund within the Consumer Privacy Fund and would require the funds awarded by the agency to a whistleblower or for attorney’s fees to be deposited into the Consumer Privacy Whistleblower Subfund. The bill would make those funds available, upon appropriation by the Legislature, for payment to the whistleblower or the
whistleblower’s attorney, as appropriate. </html:p>
<html:p>This bill would require the whistleblower, in order to be eligible for a whistleblower award, to meet certain requirements, including that the whistleblower be represented by an attorney and declare under penalty of perjury that the information submitted with the whistleblower complaint is true and correct to the best of the whistleblower’s knowledge and belief. The bill would authorize a person to submit a whistleblower complaint anonymously, subject to certain conditions, including that the whistleblower’s attorney certify, under penalty of perjury, that the attorney has taken certain actions, including verifying the whistleblower’s identity. The bill would make a whistleblower’s identify confidential, except as provided, and would exempt disclosure of the whistleblower’s identify from the California Public Records Act.</html:p>
<html:p>By requiring the declarations under penalty of perjury
described above, the bill would create new crimes and, thus, impose a state-mandated local program.</html:p>
<html:p>Under the bill, an employee, contractor, or agent would be entitled to bring a civil action to seek specified relief and damages if the employee, contractor, or agent is subject to specified forms of discrimination in the terms and conditions of their employment because of lawful acts done by the employee, contractor, agent, or associated others in furtherance of a whistleblower complaint or administrative enforcement action under the bill or other efforts to stop one or more violations of the CCPA.</html:p>
<html:p>The California Consumer Privacy Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified.</html:p>
<html:p>This bill would declare that its provisions further the purposes and intent of the
California Consumer Privacy Act of 2020.</html:p>
<html:p>Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.</html:p>
<html:p>This bill would make legislative findings to that effect.</html:p>
<html:p>The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.</html:p>
<html:p>This bill would provide that no reimbursement is required by this act for a specified reason.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>YES</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_2B4FCD8C-2C16-4246-B604-A23DFA478B39">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.141'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.141 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_BF6B0F3B-0B27-4257-84B2-BAE3428E0BD6">
<ns0:Num>1798.141.</ns0:Num>
<ns0:LawSectionVersion id="id_5676B062-AD31-42BD-879E-7B36DB8044DF">
<ns0:Content>
<html:p>In addition to the definitions listed in Section 1798.140, the following definitions apply for purposes of this title:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Original information” means information that is all of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Derived from the whistleblower’s independent knowledge or independent analysis.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Not already known to the California Privacy Protection Agency from any other source, unless the whistleblower is the original source of the information.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
Not exclusively derived from any of the following:
</html:p>
<html:p>
(i)
<html:span class="EnSpace"/>
A governmental report, hearing, audit, or investigation.
</html:p>
<html:p>
(ii)
<html:span class="EnSpace"/>
Allegations made in a judicial hearing.
</html:p>
<html:p>
(iii)
<html:span class="EnSpace"/>
Allegations made in or from the news media, including from social media.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
This paragraph does not apply if the whistleblower was the original source of the information disclosed pursuant to clauses (i) to (iii), inclusive, of subparagraph (A).
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Original source” means an individual who meets either of the following requirements:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Prior to a public disclosure, the individual voluntarily disclosed to the state, the agency, or a political subdivision of the state the information on which the allegations or transactions in the whistleblower complaint are
based.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The individual has knowledge that is independent of, and materially adds to, the publicly disclosed allegations or transactions, and has voluntarily provided the information to the state, the agency, or a political subdivision of the state before submitting a whistleblower complaint under this title.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Whistleblower” means a person who submits a whistleblower complaint to the California Privacy Protection Agency containing original information relating to a violation of this title.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
“Whistleblower complaint” means a written submission from a whistleblower, through the whistleblower’s attorney, that includes substantially all material evidence and information that the whistleblower possesses regarding a violation of this title.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_93518AD5-EB26-4785-9463-2EDF2955DBB9">
<ns0:Num>SEC. 2.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.5.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.155.'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.155 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_14B62DFF-A968-4D41-8C7D-DD456B3C6885">
<ns0:Num>1798.155.</ns0:Num>
<ns0:LawSectionVersion id="id_9B3A59C7-ADC5-49D0-BAF9-DBF0579179D0">
<ns0:Content>
<html:p>Administrative Enforcement</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
Any business, service provider, contractor, or other person that violates this title shall be liable for an administrative fine of not more than two thousand five hundred dollars ($2,500) for each violation or seven thousand five hundred dollars ($7,500) for each intentional violation or violations involving the personal information of consumers whom the business, service provider, contractor, or other person has actual knowledge are under 16 years of age, as adjusted pursuant to subdivision (d) of Section 1798.199.95, in an administrative enforcement action brought by the California Privacy Protection Agency.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
Except as provided in subparagraph (B), 95 percent of any administrative fine assessed for a violation of this title, and of the proceeds of any settlement of an action brought pursuant to subdivision (a), shall be deposited into the Consumer Privacy Subfund created within the Consumer Privacy Fund pursuant to subdivision (b) of Section 1798.160, and shall be used exclusively by the California Privacy Protection Agency in carrying out its duties under this title.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
The amount deposited into the Consumer Privacy Subfund pursuant to subparagraph (A) shall be reduced by any amount awarded by the California Privacy Protection Agency to a whistleblower pursuant to subdivision (b) of Section 1798.199.102.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Five percent of any
administrative fine assessed for a violation of this title, and of the proceeds of any settlement of an action brought pursuant to subdivision (a), shall be deposited into the Consumer Privacy Grant Subfund created within the Consumer Privacy Fund pursuant to subdivision (d) of Section 1798.160.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_88D50830-F3DD-418A-9F9F-5D7499A8C276">
<ns0:Num>SEC. 3.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.5.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.160.'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.160 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_47352417-0463-49E7-8CB0-A87A1578557E">
<ns0:Num>1798.160.</ns0:Num>
<ns0:LawSectionVersion id="id_36D96A87-B309-4F32-A1A3-2B991BBCC86C">
<ns0:Content>
<html:p>Consumer Privacy Fund</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
A special fund to be known as the “Consumer Privacy Fund” is hereby created within the General Fund in the State Treasury, and is available upon appropriation by the Legislature.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Funds in the Consumer Privacy Fund and all subfunds within the fund shall be used exclusively for the purposes described in this section and shall not be subject to appropriation or transfer by the Legislature for any other purpose. Any interest and earnings from the fund and all subfunds within the fund shall be transferred on an annual basis to the State Treasury to be available in the General Fund for appropriation by the Legislature.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
The Consumer Privacy Subfund is hereby created within the Consumer Privacy Fund and is available upon appropriation by the Legislature. Funds in the Consumer Privacy Subfund shall be used exclusively for the purposes described in this subdivision.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
Except as provided in subparagraph (B), 95 percent of any administrative fine recovered in an action brought by the California Privacy Protection Agency for a violation of this title shall be deposited into the Consumer Privacy Subfund and shall be used exclusively by the California Privacy Protection Agency in carrying out its duties under this title.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
The amount deposited into the Consumer Privacy Subfund pursuant to subparagraph (A) shall be reduced by any amount determined by the California Privacy Protection Agency to be awarded to a whistleblower pursuant to subdivision (b) of Section 1798.199.102.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
The Attorney General Consumer Privacy Enforcement Subfund is hereby created within the Consumer Privacy Fund and is available upon appropriation by the Legislature. Funds in the Attorney General Consumer Privacy Enforcement Subfund shall be used exclusively for the purposes described in this subdivision.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Ninety-five percent of any civil penalty recovered in an action brought by the Attorney General for a violation of this title shall be deposited into the Attorney General Consumer Privacy Enforcement
Subfund and shall be used exclusively by the Attorney General in carrying out its duties under this title.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
The Consumer Privacy Grant Subfund is hereby created within the Consumer Privacy Fund and is available upon appropriation by the Legislature. Funds in the Consumer Privacy Subfund shall be used exclusively for the purposes described in this subdivision.
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
Five percent of any administrative fine recovered in an action brought by the California Privacy Protection Agency for a violation of this title shall be deposited into the Consumer Privacy Grant Subfund.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Five percent of any civil penalty recovered in an action brought by the Attorney General for a violation of this title shall be deposited into the Consumer Privacy Grant Subfund.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
Funds deposited into the Consumer Privacy Grant Subfund shall be used exclusively by the California Privacy Protection Agency to administer and distribute grants to promote and protect consumer privacy, educate children in the area of online privacy, and fund cooperative programs with international law enforcement organizations to combat fraudulent activities with respect to consumer data breaches.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Subject to subparagraph (A), the California Privacy Protection Agency shall make grants from the Consumer Privacy Grant Subfund by distributing one-third of the amount allocated for grant funding in the subfund to each of the following grant recipients:
</html:p>
<html:p>
(i)
<html:span class="EnSpace"/>
Nonprofit organizations to promote and protect consumer privacy.
</html:p>
<html:p>
(ii)
<html:span class="EnSpace"/>
Nonprofit organizations and public agencies, including school districts, to educate children in the area of online privacy.
</html:p>
<html:p>
(iii)
<html:span class="EnSpace"/>
State and local law enforcement agencies to fund cooperative programs with international law enforcement organizations to combat fraudulent activities with respect to consumer data breaches.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
The California Privacy Protection Agency shall begin administering the grant program described in paragraph (2) when the amount of funds in the Consumer Privacy Grant Subfund exceeds three hundred thousand dollars ($300,000).
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
In a fiscal year in which the amount of funds in the Consumer Privacy Grant Subfund is equal to or less than three hundred thousand dollars ($300,000), the funds shall remain in the Consumer Privacy Grant Subfund until the total
funds exceed three hundred thousand dollars ($300,000).
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
The Consumer Privacy Whistleblower Subfund is hereby created within the Consumer Privacy Fund and is available upon appropriation by the Legislature.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The funds determined by the California Privacy Protection Agency to be awarded to a whistleblower pursuant subdivision (b) of Section 1798.199.102, and any administrative penalty for attorney’s fees assessed pursuant to subdivision (d) of Section 1798.199.102, shall be deposited into the Consumer Privacy Whistleblower Subfund and shall be available, upon appropriation by the Legislature, for payment to the whistleblower or the whistleblower’s attorney, as
appropriate.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
Any remaining funds in the Consumer Privacy Fund and subfunds within the fund that were not appropriated as part of the 2025 Budget Act shall be transferred on a one-time basis in the 2025–26 fiscal year as follows:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Forty-five percent of the remaining funds shall be transferred to the Consumer Privacy Subfund created within the Consumer Privacy Fund pursuant to subdivision (b).
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Forty-five
percent of the remaining funds shall be transferred to the Attorney General Consumer Privacy Enforcement Subfund created within the Consumer Privacy Fund pursuant to subdivision (c).
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Ten percent of the remaining funds shall be transferred to the Consumer Privacy Grant Subfund created within the Consumer Privacy Fund pursuant to subdivision (d) of Section 1798.160.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_F435D723-4C8B-45FB-A7DD-2400924BBC87">
<ns0:Num>SEC. 4.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.5.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.55.'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.55 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_A57302AF-9C6C-4393-A900-878B9EEA8C27">
<ns0:Num>1798.199.55.</ns0:Num>
<ns0:LawSectionVersion id="id_269B1970-CE8C-45ED-BE1C-70833BED11B1">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
When the agency determines there is probable cause for believing this title has been violated, it shall hold a hearing to determine if a violation has or violations have occurred. Notice shall be given and the hearing conducted in accordance with the Administrative Procedure Act (Chapter 5 (commencing with Section 11500) of Part 1 of Division 3 of Title 2 of the Government Code). The agency shall have all the powers granted by that chapter. If the agency determines on the basis of the hearing conducted pursuant to this subdivision that a violation or violations have occurred, it shall issue an order that may require the violator to do all or any of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Cease and desist violation of this title.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Subject to Section 1798.155, pay an administrative fine of up to two thousand five hundred dollars ($2,500) for each violation, or up to seven thousand five hundred dollars ($7,500) for each intentional violation and each violation involving the personal information of minor consumers. When the agency determines that no violation has occurred, it shall publish a declaration so stating.
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
(i)
<html:span class="EnSpace"/>
Except as provided in clause (ii), 95 percent of any administrative fine assessed pursuant to this paragraph shall be deposited into the Consumer Privacy Subfund created within the Consumer Privacy Fund pursuant to subdivision (b) of Section 1798.160.
</html:p>
<html:p>
(ii)
<html:span class="EnSpace"/>
The amount deposited into the Consumer Privacy Subfund pursuant to clause (i) shall be reduced by any amount determined by the California Privacy Protection Agency to be awarded to a whistleblower pursuant to subdivision (b) of Section 1798.199.102.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Five percent of any administrative fine assessed pursuant to this paragraph shall be deposited into the Consumer Privacy Grant Subfund created within the Consumer Privacy Fund pursuant to subdivision (d) of Section 1798.160.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
If two or more persons are responsible for any violation or violations, they shall be jointly and severally liable.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_00380333-9FC0-46FB-BB17-6F9151FF91FE">
<ns0:Num>SEC. 5.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.101'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.101 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_3B9A523C-1F04-46C6-A6D7-FCB91D18ECB1">
<ns0:Num>1798.199.101.</ns0:Num>
<ns0:LawSectionVersion id="id_930B09C6-0DD1-4C16-87AA-C86B6C58A19A">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
A person may submit a whistleblower complaint to the agency.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
Upon receiving and reviewing a whistleblower complaint, the agency may designate a whistleblower complaint for administrative enforcement action to remedy any violation of this title that is alleged in the whistleblower complaint.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
The whistleblower’s attorney shall not represent the agency in connection with any administrative enforcement action based on information contained in a whistleblower complaint, but may provide as much assistance as the agency determines is appropriate to advance the investigation or litigation of the administrative enforcement action.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
A decision by the agency to take administrative enforcement action based on information contained in a whistleblower’s complaint does not confer a private right of action, create any property or substantive rights, or permit the whistleblower to bring a claim on behalf of the agency or the state.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_BF43BD7E-C4A6-4D2E-9B9A-C74FC5C25719">
<ns0:Num>SEC. 6.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.102'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.102 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_CCF8C12C-F12F-459F-9F39-4AC6423F641D">
<ns0:Num>1798.199.102.</ns0:Num>
<ns0:LawSectionVersion id="id_714D1A46-194C-4ECA-9C73-D8C8554B1BE6">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
If the agency designates a complaint for administrative enforcement and the whistleblower is eligible for an award, the whistleblower shall receive at least 15 percent but not more than 33 percent of the fines of the administrative enforcement action or settlement, calculated after the allocation to the Consumer Privacy Grant Subfund pursuant to Sections 1798.155, 1798.160, and 1798.199.55.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
The agency shall determine, in its final agency decision or order, the percentage amount of an award. In determining the amount of the award, the agency shall consider the following factors:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
The significance of the information provided by the whistleblower to the success of the
administrative enforcement action or settlement.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The degree of assistance provided by the whistleblower and the whistleblower’s attorney in advancing the investigation and the administrative enforcement action or settlement. In considering this factor, the agency may take into account any of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
Whether the whistleblower provided ongoing, extensive, and timely cooperation and assistance, including, but not limited to, explaining complex facts, interpreting key evidence, or identifying new and productive lines of inquiry.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
The timeliness of the whistleblower complaint to the agency or an initial complaint to an internal compliance or reporting system of a business committing or impacted by a violation of this title, if appropriate.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
The resources conserved as a result of the whistleblower’s assistance.
</html:p>
<html:p>
(D)
<html:span class="EnSpace"/>
Whether the whistleblower appropriately encouraged or authorized others to assist the agency who might otherwise not have participated in the investigation or administrative enforcement action.
</html:p>
<html:p>
(E)
<html:span class="EnSpace"/>
The efforts undertaken by the whistleblower to remediate the harm caused by the violations.
</html:p>
<html:p>
(F)
<html:span class="EnSpace"/>
Any unique hardships experienced by the whistleblower as a result of reporting and assisting in the administrative enforcement action or settlement.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
If the agency determines that an award is payable to a whistleblower pursuant to this section, the award shall be paid to the whistleblower from the Consumer Privacy Whistleblower Subfund, upon appropriation by the
Legislature, pursuant to subdivision (e) of Section 1798.160.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
In addition to any administrative fine assessed against a business, service provider, contractor, or other person pursuant to Sections 1798.155 and 1798.199.55 for a violation of this title, the agency may also assess an administrative penalty in an amount to cover the reasonable attorney’s fees of the whistleblower. The penalty amount collected shall be deposited into the Consumer Privacy Whistleblower Subfund and shall be payable upon appropriation by the Legislature pursuant to subdivision (e) of Section 1798.160.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_560D706B-E761-4E4C-A4AE-BCD23D68BAE2">
<ns0:Num>SEC. 7.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.103'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.103 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_BB3E5DAF-2901-4524-9A88-881370BED361">
<ns0:Num>1798.199.103.</ns0:Num>
<ns0:LawSectionVersion id="id_3999BA77-D1E8-40D2-81FC-38BFED140E6C">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
To be eligible for an award under subdivision (a) of Section 1798.199.102, a whistleblower shall declare under penalty of perjury that the information submitted with the whistleblower complaint is true and correct to the best of the whistleblower’s knowledge and belief. The whistleblower’s attorney shall submit the complaint to the agency’s headquarters by certified mail, with a return receipt requested, and shall also submit the information electronically through the agency’s internet website.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
An award shall not be made to any of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
A whistleblower who is, or was, at the time the whistleblower acquired the original information submitted to the agency,
a member, officer, or employee of either of the following entities:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
A federal, state, or law enforcement agency.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
A foreign government or data protection authority.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
A whistleblower who is the spouse, parent, child, or sibling of an employee, or who resides in the same household as an employee, of the entities listed in paragraph (1).
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
A whistleblower who is convicted of a criminal violation related to the administrative enforcement action that was instigated based on the whistleblower’s complaint.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
A whistleblower who fails to submit information to the agency in the form required by the agency.
</html:p>
<html:p>
(5)
<html:span class="EnSpace"/>
A
whistleblower who, in the whistleblower complaint or in any other dealings with the agency, knowingly and willfully makes a materially false, fictitious, or fraudulent statement or representation, or knowingly uses a false writing or document with the intent to mislead the agency.
</html:p>
<html:p>
(6)
<html:span class="EnSpace"/>
A whistleblower who fails to provide substantial assistance in the investigation and administrative enforcement action.
</html:p>
<html:p>
(7)
<html:span class="EnSpace"/>
A whistleblower who submits a whistleblower complaint based on the same essential facts contained in a prior whistleblower complaint received by agency.
</html:p>
<html:p>
(8)
<html:span class="EnSpace"/>
A whistleblower who is not represented by an attorney.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_55C36DCA-7DCD-4290-974F-7D24AB20245B">
<ns0:Num>SEC. 8.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.104'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.104 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_01622BFC-1E46-41FC-A9BC-1C235808442F">
<ns0:Num>1798.199.104.</ns0:Num>
<ns0:LawSectionVersion id="id_1823DB2F-3F6C-4130-8792-2C3E3C5FD89A">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
A person may submit a whistleblower complaint anonymously.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
If a person submits a whistleblower complaint anonymously, the whistleblower’s attorney shall certify, under penalty of perjury, that the attorney has taken all of the following actions:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Verified the whistleblower’s identity.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Reviewed the whistleblower’s complaint for completeness and accuracy and has verified that the information contained in the whistleblower complaint is true and complete to the best of the attorney’s knowledge, information, and belief.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Obtained the
whistleblower’s consent to disclose the whistleblower’s identity to the agency for purposes of determining whether the whistleblower may have knowingly and willfully made a false, fictitious, or fraudulent statement or representation, or used any false writing or document knowing that the writing or document contains any false, fictitious, or fraudulent statement or entry.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
A whistleblower’s identity is confidential and shall not be subject to disclosure pursuant to the California Public Records Act (Division 10 (commencing with Section 7920.000) of Title 1 of the Government Code) or other applicable law.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
Notwithstanding subdivision (c), the agency may require a whistleblower to disclose their identity, and may further disclose the whistleblower’s identity, to advance an investigation or to take administrative enforcement action.
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
Prior to the payment of an award, a whistleblower shall disclose their identity to the agency and provide other information as the agency may require.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_50827811-7F15-4469-9ED3-4FAC6D017AA1">
<ns0:Num>SEC. 9.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.199.105'%5D)" ns3:label="fractionType: LAW_SECTION">
Section 1798.199.105 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_B5DD0301-B86A-4F9D-9B1F-4E179EEDE0E7">
<ns0:Num>1798.199.105.</ns0:Num>
<ns0:LawSectionVersion id="id_7727CC95-A362-4AEB-981B-BF488D7499BA">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
An employee, contractor, or agent shall be entitled to all relief necessary to make that employee, contractor, or agent whole, if that employee, contractor, or agent is discharged, demoted, suspended, threatened, harassed, or in any other manner discriminated against in the terms and conditions of that employee’s, contractor’s, or agent’s employment because of lawful acts done by the employee, contractor, agent, or associated others in furtherance of a whistleblower complaint or administrative enforcement action under this title or other efforts to stop one or more violations of this title.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
Relief under this section shall be sought through a civil action and shall include all of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Reinstatement with the same seniority status that the employee, contractor, or agent would have had but for the discrimination.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Two times the amount of back pay, plus interest on the back pay.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Compensation for any special damages sustained as a result of the discrimination.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
Reasonable attorney’s fees and costs.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
The court may order either of the following where appropriate:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Punitive damages.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Any other relief the court deems proper.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
A civil action under this section shall
not be brought more than three years after the date when the discrimination occurred.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_A4042CED-D553-4BC7-AF3C-AA0F6C955791">
<ns0:Num>SEC. 10.</ns0:Num>
<ns0:Content>
<html:p>The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.</html:p>
</ns0:Content>
</ns0:BillSection>
<ns0:BillSection id="id_8F766B15-A85D-46A0-A230-A4FA825DEFEC">
<ns0:Num>SEC. 11.</ns0:Num>
<ns0:Content>
<html:p>The Legislature finds and declares that Section 8 of this act, which adds Section 1798.199.104 to the Civil Code, imposes a limitation on the public’s right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:</html:p>
<html:p>In order to balance the public’s right to access records with the need to protect whistleblowers from retaliation, it is necessary that a whistleblower’s identity be kept confidential.</html:p>
</ns0:Content>
</ns0:BillSection>
<ns0:BillSection id="id_2CFA81F3-A195-4600-A34F-1F2B6AB7E50B">
<ns0:Num>SEC. 12.</ns0:Num>
<ns0:Content>
<html:p>
No reimbursement is required by this act pursuant to Section 6 of Article XIII
<html:span class="ThinSpace"/>
B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII
<html:span class="ThinSpace"/>
B of the California Constitution.
</html:p>
</ns0:Content>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>