Existing law establishes the Office of Elections Cybersecurity within the Secretary of State's office to coordinate efforts between the Secretary of State and local elections officials to reduce the likelihood and severity of cyber incidents and to monitor and counteract false or misleading information regarding the electoral process. Existing law requires the Office of Elections Cybersecurity, among other things, to develop best practices for protecting against threats to election cybersecurity in consultation with federal, state, and local agencies and private organizations. This bill would also authorize the office to consult with academic researchers for that purpose. The bill would require the office to assess whether additional state resources are needed to replace election cybersecurity resources previously provided by the federal government.
Existing law prohibits the intentional use of an electronic amplifying or recording device to eavesdrop upon or record a confidential communication, as specified, without the consent of all parties to the communication. Existing law additionally prohibits tapping a communication wire or intercepting or recording a telephone communication, as specified, without the consent of all parties, and prohibits trespassing on property for the purpose of committing, or attempting to commit, a violation of those prohibitions. A violation of those provisions is punishable by a fine not exceeding $2,500, by imprisonment as either a misdemeanor or a felony, or by both the fine and imprisonment, unless otherwise exempted. If that person has previously been convicted of a violation of any of the above-described laws, except for the prohibition on trespassing, a violation of any of those provisions is punishable by a fine not exceeding $10,000, by imprisonment as either a misdemeanor or a felony, or by both the fine and imprisonment. This bill would additionally prohibit a person from operating a wearable recording device, as defined, to capture sound or video of any other person in any area within a place of business, as defined, where the person has a reasonable expectation of privacy unless the person operating the device has the explicit consent of that person to capture sound or video of that person. The bill would prohibit a person from disabling any light, sound, or other indicator on a wearable recording device that indicates that the device is capturing sound or video. The bill would exempt from these provisions the use of hearing aids, augmentative and alternative communication devices, and similar devices by persons with impaired hearing or communication disorders when used for the purpose of overcoming the impairment or disorder to permit the hearing of sounds ordinarily audible to the human ear or to support communication with the person or by persons with a disability if the device or technology is used for the purpose of enabling a person's access to, or participation in, activities of daily living or to support a person's functional needs related to the disability or condition. The bill would make a violation of these provisions punishable by a fine not exceeding $1,500, by imprisonment as a misdemeanor, or by both that fine and imprisonment. The bill would make the exemptions from the provisions described above applicable to violations of these prohibitions. By creating new crimes, the bill would impose a state-mandated local program. The bill would, commencing on January 1, 2028, prohibit a person or entity from manufacturing, selling, delivering, holding, or offering for sale in commerce a wearable recording device without a light, sound, or other indicator that is sufficiently prominent so that a reasonable person in the vicinity would be alerted to the capturing activity. The bill would prohibit a person or entity from manufacturing, selling, delivering, holding, or offering for sale in commerce any technology that is designed for the primary purpose of, primarily marketed for, or likely primarily used for enabling a person to disable any light, sound, or other indicator on a wearable recording device that indicates that the device is capturing sound or video and would prohibit a person from purchasing, trading for, otherwise acquiring, or using that technology, as specified. The bill would make a knowing violation of these provisions punishable by a civil penalty not exceeding $2,500 per violation. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.
The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that collects sensitive personal information, as defined, about the consumer to limit its use, as prescribed. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would, under the CCPA, prohibit a business, service provider, or contractor from selling or sharing sensitive personal information to a third party, except as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law establishes various healing arts boards within the Department of Consumer Affairs that license and regulate various healing arts licensees. Existing laws, including the Licensed Marriage and Family Therapist Act, the Educational Psychologist Practice Act, the Clinical Social Worker Practice Act, and the Licensed Professional Clinical Counselor Act, make a violation of those acts a crime. Existing law regulates the use of artificial intelligence, as defined. Existing law requires a health facility, clinic, physician's office, or office of a group practice that uses generative artificial intelligence to generate written or verbal patient communications pertaining to patient clinical information to ensure those communications include a disclaimer that indicates to the patient that a communication was generated by artificial intelligence and instructions describing how a patient may contact a human health care provider, employee, or other appropriate person. This bill would regulate the use of artificial intelligence in connection with providing or facilitating psychotherapy services, as defined. The bill, among other things, would authorize an individual, corporation, or entity that provides or facilitates psychotherapy services to use artificial intelligence tools or systems only to assist in providing administrative or supplementary support in psychotherapy services, as specified. The bill would prohibit an individual, corporation, or entity from using artificial intelligence to record or transcribe psychotherapeutic communications or sessions or to triage or screen a person for the need for psychotherapy services unless the patient or client or their authorized representative is informed that artificial intelligence will be used and the purpose of the artificial intelligence tool or system, and the patient or client or their authorized representative provides consent, as specified. The bill would prohibit an individual, corporation, or entity from advertising or otherwise purporting to offer psychotherapy services when the services are provided through the use of companion chatbots. The bill would prohibit an individual, corporation, or entity from allowing artificial intelligence to perform certain acts, including making therapeutic decisions or detecting emotions or mental states, as specified, without review and approval by a licensed professional. The bill would make a violation of the bill's provisions subject to the jurisdiction of the appropriate health care professional licensing board or enforcement agency, as specified, and would authorize those boards and enforcement entities to pursue any remedies authorized by law. Existing law, the Confidentiality of Medical Information Act, generally restricts the persons and entities to whom, and the purposes for which, a health care provider, health care service plan, or contractor may release a patient's medical information. The Confidentiality of Medical Information Act additionally imposes certain disclosure requirements for the release of medical information that specifically relates to the patient's participation in outpatient treatment with a psychotherapist. In this regard, the act prohibits a health care provider, health care service plan, or contractor from releasing that information to persons or entities who have requested that information and who are otherwise authorized by specified laws to receive that information, unless the requester makes certain written disclosures to the patient and to the provider of health care, health care service plan, or contractor, as specified. Those disclosures include, among other things, the specific intended uses of the information, and the length of time during which the information will be kept before being destroyed or disposed of, as specified. Existing law makes a violation of those provisions that result in economic loss or personal injury to a patient punishable as a misdemeanor. This bill would require the use of artificial intelligence in patient or client records for psychotherapy services to comply with the confidentiality requirements of the above-described provision of the Confidentiality of Medical Information Act and would prohibit a company or entity from sharing, selling, storing, or training their models on any data obtained from psychotherapy in a manner inconsistent with any applicable law. By expanding the scope of existing crimes, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.
Existing law requires law enforcement agencies, departments, or entities to consider specified best practices regarding the downloading and storage of body-worn camera data, such as specifically stating the length of time that recorded data is to be stored, when establishing policies and procedures for the implementation and operation of a body-worn camera system, as specified. This bill would require, on or before July 1, 2027, each law enforcement agency that has a body-worn camera policy to update that policy to include a procedure for emergency service personnel to request the redaction of evidentiary and nonevidentiary recordings of a patient undergoing medical or psychological evaluation, procedure, or treatment by emergency service personnel, and to maintain an unredacted copy of the recording consistent with the policies and procedures of the agency. By requiring local law enforcement agencies to adopt new policies, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law makes the violation of a county ordinance or a city ordinance a misdemeanor unless by ordinance it is made an infraction. Existing law specifies monetary fines for any violation of local ordinances that is an infraction, not to exceed specified amounts that vary based on the circumstances of the violation, as prescribed. This bill would, notwithstanding those provisions, authorize the county board of supervisors to impose fines, penalties, and forfeitures for violations of ordinances and to fix the penalty by a fine or imprisonment, or both. The bill would also establish the amount of the fine that may be imposed for the violation of a city or county ordinance, where the violation pertains to a nonresidential structure with a floor area of 20,000 or more square feet and the violation poses a threat to health and safety, to not exceed $1,000 for the first violation, $2,000 for the 2nd violation within 5 years of the first violation, and $5,000 for subsequent violations within 5 years of the first violation, as specified. This bill would make legislative findings and declarations as to the necessity of a special statute for the County of Los Angeles.
Under existing law, a county elections official is required to prepare a certified statement of the results of an election and submit it to the county board of supervisors within 30 days of the election. This bill would make it a felony, punishable by imprisonment for 16 months or 2 or 3 years, to seize or cause or assist in the seizure of ballots, election records, or certified voting technology before election results are certified by the elections official. The bill would also make it a felony punishable by imprisonment for 2, 3, or 4 years for any person with authority to direct another person subject to their supervision or authority to seize ballots, election records, or certified voting technology before election results are certified. By creating new crimes, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason. This bill would declare that it is to take effect immediately as an urgency statute.
The California Fair Employment and Housing Act establishes the Civil Rights Department within the Business, Consumer Services, and Housing Agency and requires the department to, among other things, bring civil actions to enforce the act. Existing law requires, on or before September 1, 2024, the Department of Technology to conduct, in coordination with other interagency bodies as it deems appropriate, a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, any state agency. This bill would generally regulate the development and deployment of an automated decision system (ADS) used to make consequential decisions, as defined. The bill would define "automated decision system" to mean a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is designed or used to assist or replace human discretionary decisionmaking and materially impacts natural persons. This bill would require a developer of a covered ADS, as defined, to take certain actions, including providing a potential deployer instructions explaining how the covered ADS should be used by the deployer to make or facilitate a consequential decision. This bill would require a deployer of a covered ADS to take certain actions, including provide certain disclosures to a subject of a consequential decision made or facilitated by the covered ADS that results in an adverse outcome, as defined, and provide the subject with an opportunity to appeal the outcome of the consequential decision, as prescribed. This bill would authorize the Attorney General to bring a specified civil action for noncompliance.
Existing law makes it a misdemeanor for any person having charge of a completed vote by mail ballot to interfere with a ballot's return to the local elections official. This bill would additionally make it a misdemeanor for any person having charge of a vote by mail ballot to interfere, as defined, with a ballot's delivery to a voter. The bill would make it a felony for a person with authority to direct one or more persons subject to their supervision or authority to interfere with a ballot's return to the local elections official or delivery to a voter. By expanding the scope of an existing crime, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason. This bill would declare that it is to take effect immediately as an urgency statute.
Existing law prohibits a person, other than a provider of electronic or wire communication service for specified purposes, from installing or using a pen register or a trap and trace device, as those terms are defined, without first obtaining a court order. Existing law authorizes a person who has been injured by a violation of that prohibition to bring an action against the person who committed the violation to enjoin and restrain the violation, as well as to bring an action for monetary damages, as specified. This bill would instead authorize only the Attorney General to bring that action for a violation of the above-described provision if the action is alleged to arise from conduct occurring on an internet website, online application, or mobile application. The bill would provide that this limitation applies retroactively to any pending claim in an action commenced within 2 years before the operative date of the bill. The bill would declare the severability of its provisions.
