Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information, as specified. Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed. This bill would prohibit an operating system or an application from undoing a user's affirmative configuration of a user's privacy setting without the user's consent, except as specified. The bill would define "privacy setting" to mean any user-configurable option within an application's privacy, or similarly labeled, menu that governs the application's collection, use, sharing, disclosure, retention, or processing of the user's personal information.
Existing law establishes the California Community Colleges, under the administration of the Board of Governors of the California Community Colleges, the California State University, under the administration of the Trustees of the California State University, and the University of California, under the administration of the Regents of the University of California as the 3 segments of public postsecondary education in the state. This bill would require the office of the Chancellor of the California Community Colleges and the California State University, and would request the University of California, to (1) as specified, jointly convene and participate in an intersegmental working group to develop and present recommendations for generative artificial intelligence (GenAI) system procurement standards and training, which the bill would require to be submitted on or before January 1, 2028, (2) provide the training to students, faculty, or staff, as applicable, (3) review the training developed by the working group at least once per academic year, update the training as necessary, and maintain records of completed trainings for each student, faculty member, and staff member who receives a training, as provided, and (4) within 60 days following the execution of a systemwide contract for a GenAI system and until procurement standards are adopted, submit a written report to the Legislature and certain legislative policy committees with a description of, among other things, the process used in evaluating and selecting the GenAI system, as provided.
Existing law vests the Public Utilities Commission with regulatory authority over public utilities, including electrical corporations, while local publicly owned electric utilities are under the direction of their governing boards. This bill would, until January 1, 2030, exempt a portable solar generation device, as defined, from all interconnection requirements imposed by state law, the commission, electrical corporation rules, or local publicly owned electric utility rules, as specified. The bill would, until January 1, 2030, prohibit an electrical corporation or a local publicly owned electric utility from requiring a customer using a portable solar generation device to take specified actions, including, among other things, paying any fee or charge related to the device or the electricity the device feeds into a building's electrical system. The bill would, until January 1, 2030, authorize an electrical corporation or a local publicly owned electric utility to require a customer using a portable solar generation device to notify the electrical corporation or local publicly owned electric utility, using a simple online registration form, of the address, make, model, and size of the portable solar generation device, as provided. Beginning January 1, 2030, the bill would prohibit the sale of a portable photovoltaic energy generation device that is designed to be connected to and disconnected from a building's electrical system through a receptacle and does not meet the definition of a portable solar generation device, as specified. Under existing law, a violation of any order, decision, rule, direction, demand, or requirement of the commission is a crime. Because a violation of a commission action implementing the bill's requirements would be a crime, the bill would impose a state-mandated local program. Additionally, by imposing new duties on local publicly owned electric utilities, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for specified reasons.
The Digital Financial Assets Law (DFAL) generally regulates digital financial asset business activity, including by prohibiting a covered person from taking certain actions with digital financial assets if that asset is a stablecoin, as defined and prescribed. The DFAL requires, among other charges, an applicant for a license to include a nonrefundable fee with an application, as specified. This bill would authorize the Department of Financial Protection and Innovation to adopt regulations to allow specified payments required under the DFAL to be made with stablecoins, as specified. This bill would become operative on July 1, 2027, and sunset its provisions on January 1, 2032.
Existing law requires the Public Utilities Commission to appoint a chief internal auditor who holds office at the pleasure of the commission. Existing law makes the chief internal auditor responsible for the oversight of the internal audit unit. Existing law requires the chief internal auditor to plan, initiate, and perform audits of key financial, management, operational, and information technology functions within the commission to improve accountability and transparency to executive and state management, and to report their findings and recommendations directly to an audit subcommittee of the commission. This bill would instead require the Governor to appoint an Inspector General, subject to Senate confirmation, to be responsible for the oversight of the internal audit unit and would instead require the Inspector General to plan, initiate, and perform audits of key financial, management, operational, and information technology functions within the commission to improve accountability and transparency to executive and state management. The bill would also require the Inspector General to ensure, among other things, that the commission administers funds and programs in a prescribed manner, fulfills mandated requirements, develops an annual audit plan, administers an effective enterprise risk management program, and monitors reporting compliance. The bill would provide for the appointment and removal of the Inspector General, as specified. The bill would authorize the Inspector General to access and examine all records, files, documents, accounts, reports, correspondence, or other property of the commission and public utilities, and would require other entities that are regulated by the commission and participate in programs administered by the commission, upon request of the Inspector General, to provide or make available to the Inspector General for examination all relevant records, files, documents, accounts, reports, correspondence, or other property pertaining to participation in those programs, as specified. The bill would require the Inspector General to report specified information to the Governor and the Legislature, as provided.
Existing law generally regulates the hiring of real property. The Real Estate Law generally provides for the licensure and regulation of real estate brokers and salespersons. The law requires a real estate broker or salesperson, or person acting on their behalf, who includes a digitally altered image, as defined, in an advertisement or other promotional material for the sale of real property to include a disclosure, as specified. If the advertisement or promotional material is posted on an internet website, the law requires the same image without digital alteration to be included, as specified. The law defines "sell," "sale," or "sold" for these purposes as a transaction for the transfer of real property from a seller to a buyer, and includes, among other things, a leasehold exceeding one year's duration. A willful violation of the Real Estate Law is a crime. This bill would require a person who includes a digitally altered image, as defined, in an advertisement or other promotional material for the rental of real property to include a disclosure, as specified. The bill would require the unaltered image to be included, as specified, unless the image, architectural rendering, or artistic rendering was not originally created through the use of a capture device, as defined. The bill would specify that a violation of these provisions by a person licensed under the Real Estate Law is a violation of that law. By imposing new requirements on real estate licensees, the violation of which is a crime, this bill would impose a state-mandated local program. The bill would specify that the provisions that apply to an advertisement or other promotional material for the sale of real property described above do not apply to an advertisement or other promotional material for a leasehold exceeding one year's duration. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.
California House Resolution 139 designates July 20 as Lunar Landing Day in the state to commemorate the first human moon landing in 1969. The resolution encourages residents to honor aerospace engineers who contributed to the Apollo missions and to promote science, technology, engineering, and math education. It also calls for celebrating past space exploration achievements while inspiring future innovation and discovery.
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information, as specified. Existing law, the California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce those provisions. Existing law requires a retail grocery store or grocery department within a general retail merchandise store that uses a point-of-sale system to have a clearly readable price indicated on 85% of the total number of packaged consumer commodities offered for sale, subject to specified exemptions. This bill would, subject to certain exceptions, prohibit a retailer from engaging in surveillance pricing. The bill would define "surveillance pricing" to mean offering or setting a customized price for a good for a specific consumer or group of consumers, based, in whole or in part, on personally identifiable information, as specified, and determined in whole or in part through the use of any technology, software, program, machine-based system, or computational process that uses statistical modeling, data analytics, artificial intelligence, or other data processing techniques. The bill would also define "surveillance pricing" to mean random variations in prices to different consumers using a website, mobile application, or comparable online technology. The bill would provide that its provisions do not limit or impair any consumer right or remedy available under any other state or federal law. The bill would declare that any waiver of these provisions is against public policy and is void and unenforceable. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law authorizes designated health care services providers, employees, volunteers, and patients, and individuals who face threats of violence or violence or harassment from the public because of their affiliation with a designated health care services facility, to complete an application to be approved by the Secretary of State for the purposes of enabling state and local agencies to respond to requests for public records without disclosing a program participant's residence address contained in any public record and otherwise provide for confidentiality of identity for that person, subject to specified conditions. Existing law defines "designated health care services" to mean gender-affirming health care services or reproductive health care services. Under existing law, any person who makes a false statement in an application is guilty of a misdemeanor. Existing law prohibits a person, business, or association from knowingly publicly posting or publicly displaying, disclosing, or distributing on internet websites or on social media, the personal information or image of any designated health care services patient, provider, or assistant, or other individuals residing at the same home address, with the intent to incite a third person to cause imminent great bodily harm to the person identified in the posting or display, or to a coresident of that person, as specified, or to threaten the person identified in the posting or display, or a coresident of that person, as specified. Existing law additionally prohibits a person, business, or association from soliciting, selling, or trading on the internet or social media the personal information or image of a designated health care services patient, provider, or assistant with the intent described above. Existing law establishes a cause of action for injunctive or declarative relief for a violation of these prohibitions. Existing law prohibits a person from posting on the internet or social media, with the intent that another person imminently use that information to commit a crime involving violence or a threat of violence against a designated health care services patient, provider, or assistant, or other individuals residing at the same home address, the personal information or image of a reproductive health care services patient, provider, or assistant, or other individuals residing at the same home address. This bill would, commencing October 1, 2027, similarly establish an address confidentiality program for a designated immigration support services provider, employee, or volunteer, as defined, who faces threats of violence or harassment from the public because of their affiliation with a designated immigration support services facility. This bill would additionally prohibit a person, business, or association from soliciting, selling, or trading on the internet the personal information or image of a designated immigration support services provider, employee, or volunteer with the intent described above. The bill would also, among other things, prohibit a person from posting on the internet the personal information or image of a designated immigration support services provider, employee, or volunteer, or other individuals residing at the same home address, with the specific intent that another person imminently use that information to commit a crime involving violence or a threat of violence that is likely to occur against such an individual. The bill would define various terms for these purposes. By imposing new duties on local agencies and creating new crimes, this bill would create a state-mandated local program. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason. With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , imposes various obligations on businesses with respect to personal information, as defined. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. The CCPA requires a business to inform consumers of the categories of personal information to be collected and the purposes for which the categories of personal information are collected or used and whether that information is sold or shared. Existing law, the Student Online Personal Information Protection Act, prohibits an operator, as defined, from, among other things, disclosing a K–12 student's personal information, except as specified. Existing law, the Student Test Taker Privacy Protection Act, prohibits a business providing proctoring services in an educational setting from collecting, retaining, using, or disclosing personal information except to the extent necessary to provide those proctoring services and in other specified circumstances. This bill, beginning July 1, 2027, would require a business providing those proctoring services to a school district, county office of education, or charter school for classroom- or course-based exams to use end-to-end encryption, as defined, for those purposes. The bill would define "end-to-end encryption" for these purposes to mean a security method where data is encrypted on the sender's device and remains encrypted until it reaches the intended recipient's device and is unreadable by any other party, including the business providing proctoring services. The California Privacy Rights Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
