| Last Version Text |
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__030294AMD</ns0:Id>
<ns0:VersionNum>94</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2025-01-23</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_ASSEMBLY</ns0:ActionText>
<ns0:ActionDate>2025-05-01</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-06-23</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-06-27</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-07-03</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-07-17</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>302</ns0:MeasureNum>
<ns0:MeasureState>AMD</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Bauer-Kahan</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Bauer-Kahan</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title>An act to add Section 1798.99.86.5 to the Civil Code, relating to personal information.</ns0:Title>
<ns0:RelatingClause>personal information</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Data brokers: elected officials and judges.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.</html:p>
<html:p>Existing law requires the agency to establish an accessible deletion mechanism that, among other things, allows a consumer to request the deletion of all personal information related to that consumer through a single deletion request. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, within 45 days after receiving a request, process all deletion requests and delete all personal information related to the
consumers making the requests, as prescribed. Existing law requires a data broker to delete all personal information of the consumer at least once every 45 days unless the consumer requests otherwise, as prescribed. Existing law defines “data broker” to mean a business, as defined, that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, except as provided.</html:p>
<html:p>This bill would require the agency to obtain a list of all state and local elected officials, would require the Judicial Council to provide the agency with a list of all California
judges, and would require the agency to allow elected officials or a judges to remove their information from those lists, as prescribed. The bill would require the lists to be kept confidential, as specified. The bill would also require the agency to upload the lists to the accessible deletion mechanism described above and, beginning August 1, 2026, require an entity receiving a notification that a deletion is required to do so within 5 days.</html:p>
<html:p>This bill would authorize an elected official or judge who is on a list described above, the Attorney General, a county counsel, or a city attorney to bring an action for a violation of the bill, as prescribed.</html:p>
<html:p>Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.</html:p>
<html:p>This bill would make legislative findings to that effect.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_7142DB2B-8814-4CB6-BD75-7006D7FEFC11">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.99.86.5'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.99.86.5 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_12D37F77-F8FC-4DE3-B9BB-53A21A5EF826">
<ns0:Num>1798.99.86.5.</ns0:Num>
<ns0:LawSectionVersion id="id_42075284-3F81-4AF0-85CA-3B0ED33BDD21">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
On or before March 1, 2026, the California Privacy Protection Agency shall obtain a list of all state and local elected officials, which shall serve as each elected official’s request to delete the elected official’s personal information pursuant to paragraph (1) of subdivision (b) of Section 1798.99.86. The list shall include each elected official’s name and other profile data, as defined by the California Privacy Protection Agency, that has been shared voluntarily by the elected official.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The California Privacy Protection Agency shall provide each elected official an opportunity to request that the elected official’s name and profile data be removed from the list.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Following the certification of a final election, the California Privacy Protection Agency shall comply with paragraphs (1) and (2) with respect to each newly elected official.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
The Judicial Council shall provide the California Privacy Protection Agency with a list of all California judges, which shall serve as each judge’s request to delete the judge’s personal information pursuant to paragraph (1) of subdivision (b) of Section 1798.99.86. The list shall include each judge’s name and other profile data, as defined by the California Privacy Protection Agency, that has been shared voluntarily by the judge.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Before providing the list to the California Privacy Protection Agency, the Judicial Council shall provide each judge an opportunity to request that the judge’s name and profile data
be removed from the list. The list submitted to the California Privacy Protection Agency shall only include those judges that did not request to be removed from the list.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
The Judicial Council shall provide an updated list after the appointment or election of any additional judge.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
After receipt of the lists required by this section, the California Privacy Protection Agency shall upload the lists required by this section to the accessible deletion mechanism established pursuant to Section 1798.99.86.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Beginning August 1, 2026, an entity receiving a notification that a deletion is required shall do so within five days.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
Any information shared pursuant to this section shall be shared in a secure and confidential
exchange. The lists and the information in the lists shall be confidential and not subject to disclosure under the California Public Records Act (Division 10 (commencing with Section 7920.000) of Title 1 of the Government Code).
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
An elected official or judge who is on a list described in subdivision (a) or (b), the Attorney General, a county counsel, or a city attorney may bring an action for a violation of this section for any of the following relief:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Declaratory relief.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Injunctive relief.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Reasonable attorney’s fees.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
Actual damages.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
In addition to the other relief provided under this section, if a
court finds that an entity willfully refused to provide for deletion as required under this section, the court may award punitive damages.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_D94C563E-8B11-49AA-8FE1-9A5E2564019C">
<ns0:Num>SEC. 2.</ns0:Num>
<ns0:Content>
<html:p>The Legislature finds and declares that Section 1 of this act, which adds Section 1798.99.86.5 to the Civil Code, imposes a limitation on the public’s right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:</html:p>
<html:p>In order to protect the confidential and
private information of an elected official or judge, it is necessary that this act limit the public’s right of access to that information.</html:p>
</ns0:Content>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>
|
| Last Version Text Digest |
The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires the agency to establish an accessible deletion mechanism that, among other things, allows a consumer to request the deletion of all personal information related to that consumer through a single deletion request. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, within 45 days after receiving a request, process all deletion requests and delete all personal information related to the consumers making the requests, as prescribed. Existing law requires a data broker to delete all personal information of the consumer at least once every 45 days unless the consumer requests otherwise, as prescribed. Existing law defines “data broker” to mean a business, as defined, that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, except as provided. This bill would require the agency to obtain a list of all state and local elected officials, would require the Judicial Council to provide the agency with a list of all California judges, and would require the agency to allow elected officials or a judges to remove their information from those lists, as prescribed. The bill would require the lists to be kept confidential, as specified. The bill would also require the agency to upload the lists to the accessible deletion mechanism described above and, beginning August 1, 2026, require an entity receiving a notification that a deletion is required to do so within 5 days. This bill would authorize an elected official or judge who is on a list described above, the Attorney General, a county counsel, or a city attorney to bring an action for a violation of the bill, as prescribed. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect. |