Mobility devices: personal information.

Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumer's personal information. Existing law, the Electronic Communications Privacy Act, generally prohibits a government entity from compelling the production of or access to electronic communication information or electronic device information, as defined, without a search warrant, wiretap order, order for electronic reader records, subpoena, or order for a pen register or trap and trace device, except for emergency situations, as specified. This bill would authorize a public agency, defined as a state or local public entity that issues a permit to an operator for mobility services or that otherwise regulates an operator, to require an operator to periodically submit to the public agency anonymized trip data and the operator's mobility devices operating in the geographic area under the public agency's jurisdiction and provide specified notice of that requirement to the operator. The bill would authorize a public agency to share anonymized trip data with a contractor, agent, or other public agency only if specified conditions are met, including that the purpose of the sharing is to assist the public agency in the promotion and protection of transportation planning, integration of mobility options, and road safety. The bill would prohibit a public agency from sharing trip data with a contractor or agent.