Session:   

Bill

Home - Bills - Bill - Authors - Dates - Keywords - Tags - Locations

Measure AB 322
Authors Ward  
Principle Coauthors: Aguiar-Curry  
Coauthors: Carrillo   Elhawary   Ortega   Wiener  
Subject Precise geolocation information.
Relating To relating to privacy.
Title An act to add Section 1798.122 to the Civil Code, relating to privacy.
Last Action Dt 2025-06-23
State Amended Senate
Status In Committee Process
Active? Y
Vote Required Majority
Appropriation No
Fiscal Committee Yes
Local Program No
Substantive Changes None
Urgency No
Tax Levy No
Leginfo Link Bill
Actions
2025-08-29     In committee: Held under submission.
2025-08-18     In committee: Referred to suspense file.
2025-07-16     From committee: Do pass and re-refer to Com. on APPR. (Ayes 11. Noes 2.) (July 15). Re-referred to Com. on APPR.
2025-06-25     Re-referred to Com. on JUD.
2025-06-24     Withdrawn from committee.
2025-06-24     Re-referred to Com. on RLS.
2025-06-23     From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on APPR.
2025-06-19     In committee: Set, first hearing. Hearing canceled at the request of author.
2025-06-11     From committee: Do pass and re-refer to Com. on APPR. (Ayes 4. Noes 0.) (June 11). Re-referred to Com. on APPR.
2025-05-07     Referred to Com. on ED.
2025-04-21     Read third time. Passed. Ordered to the Senate. (Ayes 62. Noes 0. Page 1175.)
2025-04-21     In Senate. Read first time. To Com. on RLS. for assignment.
2025-04-10     Read second time. Ordered to third reading.
2025-04-09     From committee: Do pass. (Ayes 10. Noes 0.) (April 9).
2025-03-13     From committee: Do pass and re-refer to Com. on APPR. with recommendation: To Consent Calendar. (Ayes 8. Noes 0.) (March 12). Re-referred to Com. on APPR.
2025-02-10     Referred to Com. on ED.
2025-01-27     Read first time.
2025-01-25     From printer. May be heard in committee February 24.
2025-01-24     Introduced. To print.
Keywords
Tags
Versions
Amended Senate     2025-06-23
Introduced     2025-01-24
Last Version Text
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
	


	<ns0:Description>
		<ns0:Id>20250AB__032298AMD</ns0:Id>
		<ns0:VersionNum>98</ns0:VersionNum>
		<ns0:History>
			<ns0:Action>
				<ns0:ActionText>INTRODUCED</ns0:ActionText>
				<ns0:ActionDate>2025-01-24</ns0:ActionDate>
			</ns0:Action>
			<ns0:Action>
				<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
				<ns0:ActionDate>2025-06-23</ns0:ActionDate>
			</ns0:Action>
		</ns0:History>
		<ns0:LegislativeInfo>
			<ns0:SessionYear>2025</ns0:SessionYear>
			<ns0:SessionNum>0</ns0:SessionNum>
			<ns0:MeasureType>AB</ns0:MeasureType>
			<ns0:MeasureNum>322</ns0:MeasureNum>
			<ns0:MeasureState>AMD</ns0:MeasureState>
		</ns0:LegislativeInfo>
		<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Ward</ns0:AuthorText>
		<ns0:AuthorText authorType="PRINCIPAL_COAUTHOR_ORIGINATING">(Principal coauthor: Assembly Member Aguiar-Curry)</ns0:AuthorText>
		<ns0:AuthorText authorType="COAUTHOR_ORIGINATING">(Coauthors: Assembly Members Carrillo, Elhawary, and Ortega)</ns0:AuthorText>
		<ns0:AuthorText authorType="COAUTHOR_OPPOSITE">(Coauthor: Senator Wiener)</ns0:AuthorText>
		<ns0:Authors>
			<ns0:Legislator>
				<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Ward</ns0:Name>
			</ns0:Legislator>
			<ns0:Legislator>
				<ns0:Contribution>PRINCIPAL_COAUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Aguiar-Curry</ns0:Name>
			</ns0:Legislator>
			<ns0:Legislator>
				<ns0:Contribution>COAUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Carrillo</ns0:Name>
			</ns0:Legislator>
			<ns0:Legislator>
				<ns0:Contribution>COAUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Elhawary</ns0:Name>
			</ns0:Legislator>
			<ns0:Legislator>
				<ns0:Contribution>COAUTHOR</ns0:Contribution>
				<ns0:House>ASSEMBLY</ns0:House>
				<ns0:Name>Ortega</ns0:Name>
			</ns0:Legislator>
			<ns0:Legislator>
				<ns0:Contribution>COAUTHOR</ns0:Contribution>
				<ns0:House>SENATE</ns0:House>
				<ns0:Name>Wiener</ns0:Name>
			</ns0:Legislator>
		</ns0:Authors>
		<ns0:Title>An act to add Section 1798.122 to the Civil Code, relating to privacy.</ns0:Title>
		<ns0:RelatingClause>privacy</ns0:RelatingClause>
		<ns0:GeneralSubject>
			<ns0:Subject>Precise geolocation information.</ns0:Subject>
		</ns0:GeneralSubject>
		<ns0:DigestText>
			<html:p> Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that collects sensitive personal information about the consumer to limit its use, as prescribed. Existing law defines “sensitive personal information” to mean, among other things, personal information that reveals a consumer’s precise geolocation. Existing law, the California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA.</html:p>
			<html:p>This bill would require a business that collects precise geolocation information to
			 prominently display, when information is being collected, a notice to the consumer whose information is being collected that states certain information related to the collection of the information and its use by the business, including the goods or services requested by the consumer for which the business is collecting, processing, or disclosing the geolocation information and a description of how the business will process the geolocation information to carry out those purposes.</html:p>
			<html:p>This bill would prohibit a business that collects precise geolocation information from, among other things, retaining the information longer than necessary to provide the goods or services requested by the consumer or longer than one year after the consumer’s last intentional interaction with the business, whichever is earlier.</html:p>
			<html:p>This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of
			 2020.</html:p>
		</ns0:DigestText>
		<ns0:DigestKey>
			<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
			<ns0:Appropriation>NO</ns0:Appropriation>
			<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
			<ns0:LocalProgram>NO</ns0:LocalProgram>
		</ns0:DigestKey>
		<ns0:MeasureIndicators>
			<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
			<ns0:ImmediateEffectFlags>
				<ns0:Urgency>NO</ns0:Urgency>
				<ns0:TaxLevy>NO</ns0:TaxLevy>
				<ns0:Election>NO</ns0:Election>
				<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
				<ns0:BudgetBill>NO</ns0:BudgetBill>
				<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
			</ns0:ImmediateEffectFlags>
		</ns0:MeasureIndicators>
	</ns0:Description>
	<ns0:Bill id="bill">
		<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
		<ns0:BillSection id="id_A4A860C6-5A47-4201-AFF0-FF781AB1C1F8">
			<ns0:Num>SECTION 1.</ns0:Num>
			<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.122'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
				Section 1798.122 is added to the 
				<ns0:DocName>Civil Code</ns0:DocName>
				, to read:
			</ns0:ActionLine>
			<ns0:Fragment>
				<ns0:LawSection id="id_7F5A01F4-5881-4AFE-A783-DE0D5331FEF2">
					<ns0:Num>1798.122.</ns0:Num>
					<ns0:LawSectionVersion id="id_D09AA693-AD78-40C8-8998-73B95AD36591">
						<ns0:Content>
							<html:p>
								(a)
								<html:span class="EnSpace"/>
								A business that collects precise geolocation information shall prominently display, when precise geolocation information is being collected, a notice to the consumer whose precise geolocation information is being collected that states all of the following:
							</html:p>
							<html:p>
								 (1)
								<html:span class="EnSpace"/>
								The fact that the consumer’s precise geolocation information is being collected.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								The name of the business collecting the consumer’s precise geolocation information.
							</html:p>
							<html:p>
								(3)
								<html:span class="EnSpace"/>
								A telephone number and an internet website through which the consumer can obtain more information.
							</html:p>
							<html:p>
								 (4)
								<html:span class="EnSpace"/>
								The type of
						precise geolocation information collected, including the precision of the information.
							</html:p>
							<html:p>
								(5)
								<html:span class="EnSpace"/>
								The goods or services requested by the consumer for which the business is collecting, processing, or disclosing the precise geolocation information and a description of how the business will process the precise geolocation information to carry out those purposes.
							</html:p>
							<html:p>
								(6)
								<html:span class="EnSpace"/>
								Any disclosures of the precise geolocation information necessary to provide the goods or services requested by the consumer and the identities of the third parties to whom the precise geolocation information could be disclosed.
							</html:p>
							<html:p>
								(b)
								<html:span class="EnSpace"/>
								A business that collects precise geolocation data shall not do any of the following:
							</html:p>
							<html:p>
								(1)
								<html:span class="EnSpace"/>
								(A)
								<html:span class="EnSpace"/>
								Except as provided in subparagraph (B), collect or
						process precise geolocation information more than necessary to provide the goods or services requested by the consumer.
							</html:p>
							<html:p>
								(B)
								<html:span class="EnSpace"/>
								(i)
								<html:span class="EnSpace"/>
								A business may collect or process precise geolocation information that is necessary to respond to security incidents, fraud, harassment, malicious or deceptive activities, or any illegal activity targeted at, or involving, the controller or processor or its services or to investigate, report, or prosecute those responsible for any of those actions.
							</html:p>
							<html:p>
								 (ii)
								<html:span class="EnSpace"/>
								Precise geolocation information collected and processed under this subparagraph shall not be retained for longer than 30 days.
							</html:p>
							<html:p>
								(2)
								<html:span class="EnSpace"/>
								Retain precise geolocation information longer than necessary to provide the goods or services requested by the consumer or longer than one year after the consumer’s last intentional
						interaction with the business, whichever is earlier.
							</html:p>
							<html:p>
								(3)
								<html:span class="EnSpace"/>
								Sell, trade, or lease precise geolocation information to a third party.
							</html:p>
							<html:p>
								(4)
								<html:span class="EnSpace"/>
								Disclose precise geolocation information to a state or local government agency or official unless the agency or official serves the business or service provider of the business with a valid court order issued by a California court or a court order from another jurisdiction that is consistent with California’s laws, including, but not limited to, both of the following:
							</html:p>
							<html:p>
								(A)
								<html:span class="EnSpace"/>
								The Reproductive Privacy Act (Article 2.5 (commencing with Section 123460) of Chapter 2 of Part 2 of Division 106 of the Health and Safety Code).
							</html:p>
							<html:p>
								(B)
								<html:span class="EnSpace"/>
								A foreign penal civil action, as defined in Section 2029.200 of the Code of Civil Procedure.
							</html:p>
							<html:p>
								(5)
								<html:span class="EnSpace"/>
								Disclose precise geolocation information to a federal government agency unless required to do so by federal law.
							</html:p>
						</ns0:Content>
					</ns0:LawSectionVersion>
				</ns0:LawSection>
			</ns0:Fragment>
		</ns0:BillSection>
		<ns0:BillSection id="id_A698E5CA-B4DC-4724-8678-F64E867861D9">
			<ns0:Num>SEC. 2.</ns0:Num>
			<ns0:Content>
				<html:p>The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.</html:p>
			</ns0:Content>
		</ns0:BillSection>
	</ns0:Bill>
</ns0:MeasureDoc>
Last Version Text Digest Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that collects sensitive personal information about the consumer to limit its use, as prescribed. Existing law defines “sensitive personal information” to mean, among other things, personal information that reveals a consumer’s precise geolocation. Existing law, the California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would require a business that collects precise geolocation information to prominently display, when information is being collected, a notice to the consumer whose information is being collected that states certain information related to the collection of the information and its use by the business, including the goods or services requested by the consumer for which the business is collecting, processing, or disclosing the geolocation information and a description of how the business will process the geolocation information to carry out those purposes. This bill would prohibit a business that collects precise geolocation information from, among other things, retaining the information longer than necessary to provide the goods or services requested by the consumer or longer than one year after the consumer’s last intentional interaction with the business, whichever is earlier. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.