The California Consumer Privacy Act of 2018 grants to a consumer various rights with respect to personal information that is collected by a business, including the right to direct a business that collects sensitive personal information about the consumer to limit its use of the consumer’s sensitive personal information, as defined, to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services, to perform certain other services, and as authorized by certain regulations. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.

Existing law provides that sensitive personal information that is publicly available, as defined, is not considered sensitive personal information or personal information.

This bill would remove that provision regarding publicly available sensitive personal information.

This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.