The California Consumer Privacy Act of 2018 (CCPA) grants to a consumer various rights with respect to personal information that is collected by a business, including the right to delete personal information. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. The CCPA excludes from the definition of "personal information" publicly available information. Existing law defines "publicly available" for these purposes to include 3 types of information. One type is information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media. This bill would revise that part of the definition of "publicly available" by removing the condition that the business have a reasonable basis to believe the information is lawfully made available. The CCPA also includes in that definition of "publicly available" information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience. This bill would delete that part of the definition of "publicly available." This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law, the California Emergency Services Act, establishes the California Cybersecurity Integration Center within the Office of Emergency Services to serve as the central organizing hub of state government's cybersecurity activities and to coordinate information sharing with various entities. Existing law also requires the Technology Recovery Plan element of the State Administrative Manual to ensure the inclusion of cybersecurity strategy incident response standards for each state agency to secure its critical infrastructure controls and information, as prescribed. This bill would require, on or before July 1, 2026, an operator, defined as a state agency responsible for operating, managing, overseeing, or controlling access to critical infrastructure, that deploys a covered artificial intelligence (AI) system, as defined, to establish a human oversight mechanism that ensures a human monitors the system's operations in real time and reviews and approves any plan or action proposed by the covered AI system before execution, except as provided. The bill would require the Department of Technology to develop specialized training in AI safety protocols and risk management techniques to oversight personnel. The bill would require oversight personnel for an operator to conduct an annual assessment of its covered AI systems, as specified, and to submit a summary of the findings to the department. The bill would make findings and declarations related to its provisions. The bill would preclude disclosure of specified information by the office. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.
Existing law vests the Public Utilities Commission (PUC) with regulatory authority over public utilities, including electrical corporations. Existing law requires the PUC, in consultation with the State Energy Resources Conservation and Development Commission and the Independent System Operator, to take specified actions to facilitate the commercialization of microgrids for distribution customers of large electrical corporations, including developing microgrid service standards necessary to meet state and local permitting requirements and developing methods to reduce barriers for microgrid deployment without shifting costs between ratepayers. This bill would require a large electrical corporation, upon request, to collaborate with local governments, tribal governments, or community choice aggregators within its service area to support resiliency planning, as provided. The bill would require large electrical corporations to provide local governments, tribal governments, and community choice aggregators with access to data, including electrical distribution equipment data, transmission and distribution circuit data, grid hardening plans, and other information as directed by the commission, to support resiliency planning by local governments and tribal governments to ensure local governments, tribal governments, and community choice aggregators are able to plan potential microgrid projects to support critical facilities. The bill would authorize the commission to require large electrical corporations to share this information in aggregated and anonymized form to protect customer privacy and electrical grid security. Under existing law, a violation of any order, decision, rule, direction, demand, or requirement of the PUC is a crime. Because the violation of a PUC action implementing the bill's requirements would be a crime, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.
Existing law requires the State Department of Education, on or before January 1, 2024, to develop a plan to expand mental health instruction in California public schools. This bill would require the department, on or before January 1, 2028, to develop a plan to expand digital wellness instruction in California public schools, as provided.
This measure would urge President Donald J. Trump and Congress to protect and maintain the historic investments made possible by the Bipartisan Infrastructure Law, the CHIPS and Science Act, and the Inflation Reduction Act of 2022.
Existing law establishes the Department of Industrial Relations in the Labor and Workforce Development Agency to administer and enforce various laws relating to employment and working conditions. This bill would require a business, as defined, to annually provide a notice to the department of all the workplace surveillance tools the employer is using in the workplace. The bill would require the notice to include, among other information, a list of the workplace surveillance tools being used that surveil employees and the categories of information being collected on employees by the workplace surveillance. The bill would also require a business to send the notice to employees and any union that represents employees of the business. The bill would make a business that violates these provisions subject to a civil penalty of $500 per violation. This bill would require the department to submit a report to the Legislature by January 1, 2029, compiling the above-described notices provided by businesses. The bill would require that the report include, among other requirements, a breakdown of notices by industry type.
Existing law requires, beginning on January 1, 2028, a vehicle with connected vehicle service to clearly indicate to a person who is inside the vehicle when a person who is outside the vehicle has accessed, among other things, connected vehicle location access. For these purposes, existing law defines "connected vehicle service" to mean any capability, including through a software application that is designed to be operated on a mobile device, to remotely obtain data from, or send commands to, a vehicle, and "connected vehicle location access" to mean a type of connected vehicle service that allows a person, who is outside of a vehicle, to view or track the location of the vehicle, as specified. If a vehicle includes connected vehicle location access, existing law requires a covered provider, as defined, to provide a mechanism that can be used by a driver who is inside a vehicle to immediately disable connected vehicle location access. Existing law delays the operation of this requirement depending on whether the vehicle was manufactured prior to, or on or after, January 1, 2028. Unless otherwise provided, a violation of the Vehicle Code constitutes an infraction. This bill would, instead, limit the provisions above to specified vehicles with connected vehicle access. The bill would apply the requirement for a vehicle with connected vehicle service to indicate to a person inside the vehicle if connected vehicle location access is enabled to all vehicles beginning with the 2031 model year. The bill would make this requirement operative beginning with the 2031 model year, for 2028, 2029, and 2030 model year vehicles, as soon as practicable after the vehicle is sold unless technologically infeasible, and on or before July 1, 2027, for 2027 model year or older vehicles unless technologically infeasible. By establishing a new duty on vehicle manufacturers, this bill would expand the general crime applicable to provisions under the Vehicle Code, thereby imposing a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason. This bill would declare that it is to take effect immediately as an urgency statute.
Existing law vests the Public Utilities Commission with regulatory jurisdiction over public utilities, including electrical corporations and gas corporations, while local publicly owned electric utilities are under the direction of their governing boards. Existing law requires every public utility to furnish and maintain adequate, efficient, just, and reasonable service, instrumentalities, equipment, and facilities, as are necessary to promote the safety, health, comfort, and convenience of its customers, its employees, and the public. This bill would require the commission, on or before January 1, 2028, to adopt standards for an electrical or gas corporation's use of artificial intelligence models, as provided. The bill would require the commission to direct an electrical or gas corporation to file a plan that demonstrates the corporation's compliance with those standards. The bill would authorize the commission to prohibit an electrical or gas corporation's use of an artificial intelligence model if the commission finds that deployment of the artificial intelligence model would negatively impact the provision of safe, affordable, and reliable electrical or gas service. The bill would require each community choice aggregator and local publicly owned electric utility to adopt a policy regarding its use of an artificial intelligence model that is consistent with the standards. Under existing law, a violation of an order, decision, rule, direction, demand, or requirement of the commission is a crime. Because a violation of a commission action implementing those requirements would be a crime, this bill would impose a state-mandated local program. Additionally, by imposing new duties on local publicly owned electric utilities, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for specified reasons.
Existing law requires the Attorney General to establish and maintain various databases and information centers relating to the identification, apprehension, and prevention of crimes, including the Violent Crime Information Center and the Automated Firearms System, among others. Existing law requires a business that controls the collection of a consumer's personal information to delete that information upon the request of the consumer and provides for administrative penalties if the business fails to act on the consumer's request. This bill would, beginning January 1, 2029, require the Department of Justice to establish the Nonconsensual Intimate Image Clearinghouse to allow individuals who were exploited in California to submit a request for the removal of nonconsensual intimate images from covered platforms. The bill would define nonconsensual intimate images to include an authentic image depicting a person nude or engaging in sexual conduct distributed without consent or an image digitally altered or generated by artificial intelligence realistically depicting a person nude or engaged in sexual conduct without consent. The bill would require the department to transmit verified identifiers of images to covered platforms and require those platforms to remove verified matches within 48 hours of receipt and to prevent the images from being uploaded again. The bill would require the department to enforce these provisions and would impose civil penalties for violations. The bill would require a peace officer in the investigation of a specified offense to advise a victim that they may make a request to the clearinghouse pursuant to these provisions and would require a peace officer to provide certain information to the clearinghouse, as specified. By increasing duties for peace officers, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law prohibits the false impersonation of another person in either that person's personal or official capacity with the intent to steal or defraud, as specified. Existing law protects all people from defamation, including libel and slander, as provided. Existing law makes any person who knowingly uses another's name, voice, signature, photograph, or likeness for commercial purposes, as specified, without that person's prior consent liable for damages, as specified. Existing law provides that a party seeking relief pursuant to those provisions may also seek an injunction or temporary restraining order according to specified procedures. This bill would enact the Digital Dignity Act. The act would subject to specified liability a person who, by distributing content with actual knowledge that the content includes a digital replica, is found guilty of violating a criminal provision for which false impersonation of another is a required element, as prescribed, or is found liable in a civil action arising from the use or portrayal through a digital replica, as provided. The Digital Dignity Act would require a large online platform that includes a generative AI tool, as defined, that provides users with the functionality to create a digital replica of other individuals to provide a mechanism for individuals to report content that violates the platform's terms of service or a provision of law relating to the individual's digital replica and to submit to the large online platform any certified court order or judgment ordering the removal of any content involving the individual's digital replica on the platform or finding that content involving the individual's digital replica was defamatory, fraudulent, or any other form of image appropriation not permitted by law, as prescribed. Upon receipt of the court order or judgment, the act would require the large online platform to remove the digital replica and make reasonable efforts to identify and remove any known identical copies. The act would authorize a city attorney or the Attorney General to bring a civil action to enforce these provisions and to seek a specified civil penalty and injunctive relief. The act would require a generative AI tool provider to maintain, for no less than 90 days, records sufficient to allow compliance with a court order issued pursuant to a civil action by the city attorney or Attorney General, as prescribed.
