| Last Version Text |
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__130098AMD</ns0:Id>
<ns0:VersionNum>98</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2025-02-21</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_ASSEMBLY</ns0:ActionText>
<ns0:ActionDate>2025-03-28</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>1300</ns0:MeasureNum>
<ns0:MeasureState>AMD</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Caloza</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Caloza</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to add Chapter 17.26 (commencing with Section 7284.3) to Division 7 of Title 1 of the Government Code, relating to privacy.</ns0:Title>
<ns0:RelatingClause>privacy</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>State and local government: data protection and privacy: immigration.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>Existing law requires the Attorney General to publish model policies limiting assistance with immigration enforcement to the fullest extent possible consistent with federal and state law at public schools, public libraries, health facilities operated by the state or a political subdivision of the state, courthouses, Division of Labor Standards Enforcement facilities, the Agricultural Labor Relations Board, the Division of Workers Compensation, and shelters, and ensuring that they remain safe and accessible to all California residents, regardless of immigration status. Existing law requires the Attorney General to publish guidance, audit criteria, and training recommendations aimed at ensuring that any databases operated by state and local law enforcement agencies, including databases maintained for the
agency by private vendors, are governed in a manner that limits the availability of information therein to the fullest extent practicable and consistent with federal and state law, to anyone or any entity for the purpose of immigration enforcement.</html:p>
<html:p>Existing law, the California Values Act, prohibits California law enforcement agencies from using agency or department moneys or personnel to investigate, interrogate, detain, detect, or arrest persons for immigration enforcement purposes, including, among other things, providing personal information about an individual, making or intentionally participating in arrests based on civil immigration warrants, or performing the functions of an immigration officer, as specified.</html:p>
<html:p>This bill would prohibit a state or local government agency from collecting immigration-related personally identifiable information unless it is explicitly required by law to do so and the collection is justified by a legitimate government purpose. The bill would prohibit a state or local government agency from sharing personally identifiable information with federal immigration enforcement agencies without a judicial warrant or court order. The bill would require any contract, agreement, or memorandum of understanding that facilitate data sharing between a state or local government agency and federal immigration enforcement authorities to comply with oversight mechanisms to ensure compliance with civil rights and privacy protections and be subject to review by the State Auditor, as described below. Because the bill would require local agencies to perform additional duties, it would impose a state-mandated local program. The bill would make these provisions enforceable by
administrative action or by imposition of a civil penalty recovered by an action brought by the Attorney General.</html:p>
<html:p>This bill would require the State Auditor to conduct audits of all state and local government agency data-sharing agreements at least every 2 years to ensure compliance with existing laws protecting privacy and civil rights. The bill would require the Office of the Attorney General to establish an oversight task force to review complaints and violations related to unauthorized data collection and sharing that would report to the Legislature annually on data privacy trends, risks, and policy recommendations.</html:p>
<html:p>The California Constitution requires the state to reimburse local agencies and
school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.</html:p>
<html:p>This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>YES</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_AB966C7C-740D-4350-BAD6-2A852DEE30BC">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:GOV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'7.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'CHAPTER'%20and%20caml%3ANum%3D'17.26.'%5D)" ns3:label="fractionType: LAW_SPREAD||commencingWith: 7284.3" ns3:type="locator">
Chapter 17.26 (commencing with Section 7284.3) is added to Division 7 of Title 1 of the
<ns0:DocName>Government Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawHeading id="id_1D5ED3D9-BE2F-4E1F-8507-EE8341C57C58" type="CHAPTER">
<ns0:Num>17.26.</ns0:Num>
<ns0:LawHeadingVersion id="id_AFB3059D-1D8B-456A-ACC9-88A954252CEA">
<ns0:LawHeadingText>California Data Protection and Privacy for All Communities Act</ns0:LawHeadingText>
</ns0:LawHeadingVersion>
<ns0:LawSection id="id_C079992A-7B79-42AF-9D88-32DD042613D9">
<ns0:Num>7284.3.</ns0:Num>
<ns0:LawSectionVersion id="id_E230DB73-7E9E-49B0-AB6A-CDBDEAE30DA2">
<ns0:Content>
<html:p>The Legislature finds and declares that the personally identifiable information of individuals who are part of vulnerable communities, particularly immigrants, must be safeguarded against unauthorized access and misuse by federal agencies. While existing laws such as the California Consumer Privacy Act provide foundational protections, further legislative measures are necessary to ensure that state and local government data collection and sharing practices do not compromise the privacy and security of at-risk populations. This chapter strengthens privacy safeguards, enhances regulatory oversight, and aligns data-sharing policies with California’s commitment to civil rights and privacy protections.</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_FF273F9D-EC18-4CCC-92E5-7A15026551AA">
<ns0:Num>7284.3.1.</ns0:Num>
<ns0:LawSectionVersion id="id_0763352D-CF62-487B-9FA4-C785EC43BBB9">
<ns0:Content>
<html:p>For purposes of this chapter, the following terms, have the following meanings:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Government agency” means any state, local, or municipal government entity that collects, stores, or shares personally identifiable information.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Immigration enforcement agencies” means United States Immigration and Customs Enforcement (ICE), United States Customs and Border Protection (CBP), and any other federal agency responsible for immigration enforcement.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Personally identifiable information” or “PII” includes, but is not limited to, immigration status, biometric data, driver’s license information, employment records, financial
information, and any other data that can be used to identify an individual.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_539A7F59-AB7A-4D85-A250-EA96E10CAA4E">
<ns0:Num>7284.3.2.</ns0:Num>
<ns0:LawSectionVersion id="id_EF3D008D-BC80-42CC-B4C6-7DAF87DCA4B8">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
A state or local government agency shall not collect immigration-related PII unless it is explicitly required by law to do so and the collection is justified by a legitimate government purpose.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
A state or local government agency shall not share PII with federal immigration enforcement agencies without a judicial warrant or court order.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
Any contract, agreement, or memorandum of understanding that facilitate data sharing between a state or local government agency and federal immigration enforcement authorities shall comply with strict oversight mechanisms that ensure compliance with civil rights and privacy protections and shall be subject to review pursuant to
Section 7284.3.4.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
This section may be enforced by administrative action or by imposition of a civil penalty recovered by an action brought by the Attorney General.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_A7531000-CC5E-46BE-80A4-8FF593C3496B">
<ns0:Num>7284.3.4.</ns0:Num>
<ns0:LawSectionVersion id="id_B2645846-DB98-453D-B482-56A0E0123933">
<ns0:Content>
<html:p>The State Auditor shall conduct audits of all state and local government agency data-sharing agreements at least every two years to ensure compliance with existing laws protecting privacy and civil rights.</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_291F715F-9E22-4CB8-91B8-3B8169CB12EC">
<ns0:Num>7284.3.5.</ns0:Num>
<ns0:LawSectionVersion id="id_AF3DDCC9-3D79-449A-B704-07AA512F7CBE">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
The Office of the Attorney General shall establish an oversight task force to review complaints and violations related to unauthorized state and local government agency data collection and sharing.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
Notwithstanding Section 10231.5, the oversight task force shall report to the Legislature annually on data privacy trends, risks, and policy recommendations.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
A report to be submitted pursuant to paragraph (1) shall be submitted in compliance with Section 9795 of the Government Code.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:LawHeading>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_0F138330-C3F0-4AA6-A4D4-AE823BCCCC97">
<ns0:Num>SEC. 2.</ns0:Num>
<ns0:Content>
<html:p>If the Commission on State Mandates determines that this act contains costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.</html:p>
</ns0:Content>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>
|
| Last Version Text Digest |
Existing law requires the Attorney General to publish model policies limiting assistance with immigration enforcement to the fullest extent possible consistent with federal and state law at public schools, public libraries, health facilities operated by the state or a political subdivision of the state, courthouses, Division of Labor Standards Enforcement facilities, the Agricultural Labor Relations Board, the Division of Workers Compensation, and shelters, and ensuring that they remain safe and accessible to all California residents, regardless of immigration status. Existing law requires the Attorney General to publish guidance, audit criteria, and training recommendations aimed at ensuring that any databases operated by state and local law enforcement agencies, including databases maintained for the agency by private vendors, are governed in a manner that limits the availability of information therein to the fullest extent practicable and consistent with federal and state law, to anyone or any entity for the purpose of immigration enforcement. Existing law, the California Values Act, prohibits California law enforcement agencies from using agency or department moneys or personnel to investigate, interrogate, detain, detect, or arrest persons for immigration enforcement purposes, including, among other things, providing personal information about an individual, making or intentionally participating in arrests based on civil immigration warrants, or performing the functions of an immigration officer, as specified. This bill would require the State Auditor to conduct audits of all state and local government agency data-sharing agreements at least every 2 years to ensure compliance with existing laws protecting privacy and civil rights. The bill would require the Office of the Attorney General to establish an oversight task force to review complaints and violations related to unauthorized data collection and sharing that would report to the Legislature annually on data privacy trends, risks, and policy recommendations. |