| Last Version Text |
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250SB__004496AMD</ns0:Id>
<ns0:VersionNum>96</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2024-12-05</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-03-05</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-03-24</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-04-08</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>SB</ns0:MeasureType>
<ns0:MeasureNum>44</ns0:MeasureNum>
<ns0:MeasureState>AMD</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Senator Umberg</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>SENATE</ns0:House>
<ns0:Name>Umberg</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to add Section 1798.122 to the Civil Code, relating to personal information.</ns0:Title>
<ns0:RelatingClause>personal information</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Brain-computer interfaces: neural data.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>The Confidentiality of Medical Information Act governs the disclosure of medical information by an employer, a provider of health care, a health care service plan, or a contractor, as those terms are defined. The California Consumer Privacy Act of 2018 (CCPA) authorizes a consumer to direct a business, as defined, that collects sensitive personal information about the consumer to limit its use of the consumer’s sensitive personal information, as specified, and defines “sensitive personal information” to include personal information that reveals a consumer’s neural data. The CCPA also authorizes a consumer to request that a business delete any personal information about the consumer which the business has collected from the consumer, as prescribed. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election,
amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.</html:p>
<html:p>This bill would require, under the CCPA, a covered business to use neural data only for the purpose for which the neural data was collected and would require a covered business to delete neural data when the purpose for which the neural data was collected is accomplished. The bill would define “covered business” to mean a person who makes available a brain-computer interface to a person in this state and would define “brain-computer interface” to mean a system that allows direct communication and control between a person’s brain and an external device.</html:p>
<html:p>This bill would declare that its provisions further the purposes and intent of the California
Privacy Rights Act of 2020.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_69CAAC51-9C28-46FA-A8A8-E5014979398B">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.122'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.122 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_A3A43600-77C3-410D-B238-D6403E0788B6">
<ns0:Num>1798.122.</ns0:Num>
<ns0:LawSectionVersion id="id_CEE40AE5-4D6E-4AC4-9D2E-AE14B5BDB0DF">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
As used in this section:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
“Brain-computer interface” means a system that allows direct communication and control between a person’s brain and an external device.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
“Covered business” means a person who makes available a brain-computer interface to a person in this state.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
A covered business shall use neural data collected through a brain-computer interface only for the purpose for which the neural data was collected.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
A covered business shall delete neural data collected
through a brain-computer interface when the purpose for which the neural data was collected is accomplished.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_83417443-91EC-4AAF-9733-A4C6D47D953D">
<ns0:Num>SEC. 2.</ns0:Num>
<ns0:Content>
<html:p>The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.</html:p>
</ns0:Content>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>
|
| Last Version Text Digest |
The Confidentiality of Medical Information Act governs the disclosure of medical information by an employer, a provider of health care, a health care service plan, or a contractor, as those terms are defined. The California Consumer Privacy Act of 2018 (CCPA) authorizes a consumer to direct a business, as defined, that collects sensitive personal information about the consumer to limit its use of the consumer’s sensitive personal information, as specified, and defines “sensitive personal information” to include personal information that reveals a consumer’s neural data. The CCPA also authorizes a consumer to request that a business delete any personal information about the consumer which the business has collected from the consumer, as prescribed. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. This bill would require, under the CCPA, a covered business to use neural data only for the purpose for which the neural data was collected and would require a covered business to delete neural data when the purpose for which the neural data was collected is accomplished. The bill would define “covered business” to mean a person who makes available a brain-computer interface to a person in this state and would define “brain-computer interface” to mean a system that allows direct communication and control between a person’s brain and an external device. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020. |