Session:   

Bill

Home - Bills - Bill - Authors - Dates - Keywords - Tags - Locations

Measure AB 302
Authors Bauer-Kahan  
Subject Data brokers: elected officials and judges.
Relating To relating to personal information.
Title An act to add Section 1798.99.86.5 to the Civil Code, relating to personal information.
Last Action Dt 2025-07-17
State Amended Senate
Status In Committee Process
Active? Y
Vote Required Majority
Appropriation No
Fiscal Committee Yes
Local Program No
Substantive Changes None
Urgency No
Tax Levy No
Leginfo Link Bill
Actions
2025-08-29     In committee: Held under submission.
2025-08-18     In committee: Referred to suspense file.
2025-07-17     Read second time and amended. Re-referred to Com. on PUB. S.
2025-07-17     Withdrawn from committee.
2025-07-17     Re-referred to Com. on APPR.
2025-07-16     From committee: Amend, and do pass as amended and re-refer to Com. on PUB. S. (Ayes 11. Noes 0.) (July 15).
2025-07-03     From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on JUD.
2025-06-27     From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on JUD.
2025-06-25     Re-referred to Coms. on JUD. and PUB. S.
2025-06-24     Re-referred to Com. on RLS.
2025-06-24     Withdrawn from committee.
2025-06-23     From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on HEALTH.
2025-06-04     Referred to Coms. on HEALTH and JUD.
2025-05-23     Read third time. Passed. Ordered to the Senate. (Ayes 56. Noes 11. Page 1650.)
2025-05-23     In Senate. Read first time. To Com. on RLS. for assignment.
2025-05-15     Read second time. Ordered to third reading.
2025-05-14     From committee: Do pass. (Ayes 11. Noes 4.) (May 14).
2025-05-05     Re-referred to Com. on APPR.
2025-05-01     Read second time and amended.
2025-04-30     From committee: Amend, and do pass as amended and re-refer to Com. on APPR. (Ayes 9. Noes 3.) (April 29).
2025-04-23     From committee: Do pass and re-refer to Com. on JUD. (Ayes 12. Noes 2.) (April 22). Re-referred to Com. on JUD.
2025-03-28     Referred to Coms. on HEALTH and JUD.
2025-01-24     From printer. May be heard in committee February 23.
2025-01-23     Read first time. To print.
Keywords
Tags
Versions
Amended Senate     2025-07-17
Amended Senate     2025-07-03
Amended Senate     2025-06-27
Amended Senate     2025-06-23
Amended Assembly     2025-05-01
Introduced     2025-01-23
Last Version Text
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
	


	<ns0:Description>
		<ns0:Id>20250AB__030294AMD</ns0:Id>
		<ns0:VersionNum>94</ns0:VersionNum>
		<ns0:History>
			<ns0:Action>
				<ns0:ActionText>INTRODUCED</ns0:ActionText>
				<ns0:ActionDate>2025-01-23</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_ASSEMBLY</ns0:ActionText>
				<ns0:ActionDate>2025-05-01</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
				<ns0:ActionDate>2025-06-23</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
				<ns0:ActionDate>2025-06-27</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
				<ns0:ActionDate>2025-07-03</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
				<ns0:ActionDate>2025-07-17</ns0:ActionDate>
			</ns0:Action>
		</ns0:History>
		<ns0:LegislativeInfo>
			<ns0:SessionYear>2025</ns0:SessionYear>
			<ns0:SessionNum>0</ns0:SessionNum>
			<ns0:MeasureType>AB</ns0:MeasureType>
			<ns0:MeasureNum>302</ns0:MeasureNum>
			<ns0:MeasureState>AMD</ns0:MeasureState>
		</ns0:LegislativeInfo>
		<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Bauer-Kahan</ns0:AuthorText>
		<ns0:Authors>
			<ns0:Legislator>
				<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Bauer-Kahan</ns0:Name>
			</ns0:Legislator>
		</ns0:Authors>
		<ns0:Title>An act to add Section 1798.99.86.5 to the Civil Code, relating to personal information.</ns0:Title>
		<ns0:RelatingClause>personal information</ns0:RelatingClause>
		<ns0:GeneralSubject>
			<ns0:Subject>Data brokers: elected officials and judges.</ns0:Subject>
		</ns0:GeneralSubject>
		<ns0:DigestText>
			<html:p>The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.</html:p>
			<html:p>Existing law requires the agency to establish an accessible deletion mechanism that, among other things, allows a consumer to request the deletion of all personal information related to that consumer through a single deletion request. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, within 45 days after receiving a request, process all deletion requests and delete all personal information related to the
			 consumers making the requests, as prescribed. Existing law requires a data broker to delete all personal information of the consumer at least once every 45 days unless the consumer requests otherwise, as prescribed. Existing law defines “data broker” to mean a business, as defined, that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, except as provided.</html:p>
			<html:p>This bill would require the agency to obtain a list of all state and local elected officials, would require the Judicial Council to provide the agency with a list of all California
			 judges, and would require the agency to allow elected officials or a judges to remove their information from those lists, as prescribed. The bill would require the lists to be kept confidential, as specified. The bill would also require the agency to upload the lists to the accessible deletion mechanism described above and, beginning August 1, 2026, require an entity receiving a notification that a deletion is required to do so within 5 days.</html:p>
			<html:p>This bill would authorize an elected official or judge who is on a list described above, the Attorney General, a county counsel, or a city attorney to bring an action for a violation of the bill, as prescribed.</html:p>
			<html:p>Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.</html:p>
			<html:p>This bill would make legislative findings to that effect.</html:p>
		</ns0:DigestText>
		<ns0:DigestKey>
			<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
			<ns0:Appropriation>NO</ns0:Appropriation>
			<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
			<ns0:LocalProgram>NO</ns0:LocalProgram>
		</ns0:DigestKey>
		<ns0:MeasureIndicators>
			<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
			<ns0:ImmediateEffectFlags>
				<ns0:Urgency>NO</ns0:Urgency>
				<ns0:TaxLevy>NO</ns0:TaxLevy>
				<ns0:Election>NO</ns0:Election>
				<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
				<ns0:BudgetBill>NO</ns0:BudgetBill>
				<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
			</ns0:ImmediateEffectFlags>
		</ns0:MeasureIndicators>
	</ns0:Description>
	<ns0:Bill id="bill">
		<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
		<ns0:BillSection id="id_7142DB2B-8814-4CB6-BD75-7006D7FEFC11">
			<ns0:Num>SECTION 1.</ns0:Num>
			<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.99.86.5'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
				Section 1798.99.86.5 is added to the 
				<ns0:DocName>Civil Code</ns0:DocName>
				, to read:
			</ns0:ActionLine>
			<ns0:Fragment>
				<ns0:LawSection id="id_12D37F77-F8FC-4DE3-B9BB-53A21A5EF826">
					<ns0:Num>1798.99.86.5.</ns0:Num>
					<ns0:LawSectionVersion id="id_42075284-3F81-4AF0-85CA-3B0ED33BDD21">
						<ns0:Content>
							<html:p>
								(a)
								<html:span class="EnSpace"/>
								(1)
								<html:span class="EnSpace"/>
								On or before March 1, 2026, the California Privacy Protection Agency shall obtain a list of all state and local elected officials, which shall serve as each elected official’s request to delete the elected official’s personal information pursuant to paragraph (1) of subdivision (b) of Section 1798.99.86. The list shall include each elected official’s name and other profile data, as defined by the California Privacy Protection Agency, that has been shared voluntarily by the elected official.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								The California Privacy Protection Agency shall provide each elected official an opportunity to request that the elected official’s name and profile data be removed from the list.
							</html:p>
							<html:p>
								(3)
								<html:span class="EnSpace"/>
								Following the certification of a final election, the California Privacy Protection Agency shall comply with paragraphs (1) and (2) with respect to each newly elected official.
							</html:p>
							<html:p>
								(b)
								<html:span class="EnSpace"/>
								(1)
								<html:span class="EnSpace"/>
								The Judicial Council shall provide the California Privacy Protection Agency with a list of all California judges, which shall serve as each judge’s request to delete the judge’s personal information pursuant to paragraph (1) of subdivision (b) of Section 1798.99.86. The list shall include each judge’s name and other profile data, as defined by the California Privacy Protection Agency, that has been shared voluntarily by the judge.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								Before providing the list to the California Privacy Protection Agency, the Judicial Council shall provide each judge an opportunity to request that the judge’s name and profile data
						be removed from the list. The list submitted to the California Privacy Protection Agency shall only include those judges that did not request to be removed from the list.
							</html:p>
							<html:p>
								(3)
								<html:span class="EnSpace"/>
								The Judicial Council shall provide an updated list after the appointment or election of any additional judge.
							</html:p>
							<html:p>
								(c)
								<html:span class="EnSpace"/>
								(1)
								<html:span class="EnSpace"/>
								After receipt of the lists required by this section, the California Privacy Protection Agency shall upload the lists required by this section to the accessible deletion mechanism established pursuant to Section 1798.99.86.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								Beginning August 1, 2026, an entity receiving a notification that a deletion is required shall do so within five days.
							</html:p>
							<html:p>
								(d)
								<html:span class="EnSpace"/>
								Any information shared pursuant to this section shall be shared in a secure and confidential
						exchange. The lists and the information in the lists shall be confidential and not subject to disclosure under the California Public Records Act (Division 10 (commencing with Section 7920.000) of Title 1 of the Government Code).
							</html:p>
							<html:p>
								(e)
								<html:span class="EnSpace"/>
								An elected official or judge who is on a list described in subdivision (a) or (b), the Attorney General, a county counsel, or a city attorney may bring an action for a violation of this section for any of the following relief:
							</html:p>
							<html:p>
								(1)
								<html:span class="EnSpace"/>
								Declaratory relief.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								Injunctive relief.
							</html:p>
							<html:p>
								(3)
								<html:span class="EnSpace"/>
								Reasonable attorney’s fees.
							</html:p>
							<html:p>
								(4)
								<html:span class="EnSpace"/>
								Actual damages.
							</html:p>
							<html:p>
								(f)
								<html:span class="EnSpace"/>
								In addition to the other relief provided under this section, if a
						court finds that an entity willfully refused to provide for deletion as required under this section, the court may award punitive damages.
							</html:p>
						</ns0:Content>
					</ns0:LawSectionVersion>
				</ns0:LawSection>
			</ns0:Fragment>
		</ns0:BillSection>
		<ns0:BillSection id="id_D94C563E-8B11-49AA-8FE1-9A5E2564019C">
			<ns0:Num>SEC. 2.</ns0:Num>
			<ns0:Content>
				<html:p>The Legislature finds and declares that Section 1 of this act, which adds Section 1798.99.86.5 to the Civil Code, imposes a limitation on the public’s right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:</html:p>
				<html:p>In order to protect the confidential and
				private information of an elected official or judge, it is necessary that this act limit the public’s right of access to that information.</html:p>
			</ns0:Content>
		</ns0:BillSection>
	</ns0:Bill>
</ns0:MeasureDoc>
Last Version Text Digest The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires the agency to establish an accessible deletion mechanism that, among other things, allows a consumer to request the deletion of all personal information related to that consumer through a single deletion request. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, within 45 days after receiving a request, process all deletion requests and delete all personal information related to the consumers making the requests, as prescribed. Existing law requires a data broker to delete all personal information of the consumer at least once every 45 days unless the consumer requests otherwise, as prescribed. Existing law defines “data broker” to mean a business, as defined, that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, except as provided. This bill would require the agency to obtain a list of all state and local elected officials, would require the Judicial Council to provide the agency with a list of all California judges, and would require the agency to allow elected officials or a judges to remove their information from those lists, as prescribed. The bill would require the lists to be kept confidential, as specified. The bill would also require the agency to upload the lists to the accessible deletion mechanism described above and, beginning August 1, 2026, require an entity receiving a notification that a deletion is required to do so within 5 days. This bill would authorize an elected official or judge who is on a list described above, the Attorney General, a county counsel, or a city attorney to bring an action for a violation of the bill, as prescribed. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.