Existing law, the Digital Age Assurance Act (DAAA) , beginning January 1, 2027, requires, among other things related to age verification with respect to software applications, an operating system provider, as defined, to provide an accessible interface at account setup that requires an account holder, as defined, to indicate the birth date, age, or both, of the user of that device for the purpose of providing a signal regarding the user's age bracket to applications available in a covered application store. Existing law defines the term "user" for these purposes to mean a child that is the primary user of a device. This bill would, among other things, delete that definition of "user," would specify that the requirement of an operating system provider to provide an accessible interface applies if an operating system operates on a device and has an account setup feature, and would require the signal to be provided to a covered application store or application developer, as prescribed. The bill would prohibit a person from requesting a signal with respect to a particular user from an operating system provider or a covered application store if not required to do so by the DAAA or any other applicable law.
Existing law prohibits a public agency, which includes the state, a city, a county, a city and county, or any agency or political subdivision of the state, a city, a county, or a city and county, including, but not limited to, a law enforcement agency, from selling, sharing, or transferring automated license plate recognition (ALPR) information, except to another public agency, and only as otherwise permitted by law. Existing law defines ALPR information as information or data collected through the use of an ALPR system. This bill would provide that "public agency" does not include a transportation agency, a public transit operator, department of transportation, public works department, or campus transportation agency, as specified, a public agency or contracted parking operator when engaging in specified activities in a parking facility, a state agency operating specified parking facilities, or the State Air Resources Board. The bill would require a public agency that accesses or provides access to ALPR information to maintain a record of that access, as provided. The bill would, beginning January 1, 2027, require new, updated, renewed, extended, expansions of, or addendums of contractual agreements with ALPR vendors, manufacturers, or suppliers to mandate that no default access is provided to any national ALPR database and that an agency's collected scans are by default not accessible to any other agency, except as specified, and would impose new requirements on sharing between California state law enforcement agencies. This bill would authorize a law enforcement agency to use ALPR information only for purposes of locating vehicles or persons when either are reasonably suspected of being involved in the commission of a public offense or locating an individual who has been reported as missing to a law enforcement agency. The bill, as of January 1, 2028, would require a public agency to archive all ALPR information that has been held for more than 60 days within 14 days, unless that ALPR information is retained in the evidence file of an active investigation or criminal proceeding or matches information on an authorized hot list, as defined, and retain ALPR information that becomes part of an investigation or criminal proceeding in the evidence file as long as the evidence file is required to be held by state law or court order. The bill would prohibit a public agency from querying any archived information except pursuant to a warrant, as specified. By imposing new requirements on public agencies, which include local agencies, this bill would impose a state-mandated local program. Existing law defines an ALPR operator as a person that operates an ALPR system, which does not include a transportation agency. Existing law defines an ALPR end-user as a person that accesses or uses an ALPR system, which does not include, among other things, a transportation agency. This bill would additionally exclude from the definitions of "ALPR operator" and "ALPR end-user" a public transit operator, department of transportation, public works department, campus transportation agency, or an airport or airport operator, as provided. The bill would also exclude from the definition of "ALPR operator" the Department of General Services and its operators when engaging in specified activities in a parking facility and would exclude from the definition of "ALPR end-user" a state agency operating specified parking facilities and the State Air Resources Board. Existing law requires an ALPR operator and ALPR end-user to maintain reasonable security procedures and practices, including operational, administrative, technical, and physical safeguards, to protect ALPR information from unauthorized access, destruction, use, modification, or disclosure. This bill would require those security procedures and practices to include safeguards for managing which employees can see the data from their systems, as specified, and requiring data security training and data privacy training for all employees that access ALPR information. Existing law requires an ALPR operator and ALPR end-user to implement a usage and privacy policy that includes, among other things, a description of the job title or other designation of the employees and independent contractors who are authorized to access and use ALPR information. This bill would require the usage and privacy policy to identify what purpose employees and independent contractors access and use ALPR information for. The bill would also require the Department of Justice to, beginning October 1, 2029, and contingent upon an appropriation of sufficient funds, conduct annual random audits on a public agency that is an ALPR operator or ALPR end-user to determine whether they have implemented and are adhering to that usage and privacy policy. Existing law requires an ALPR operator that accesses or provides access to ALPR information to require that ALPR information only be used for the authorized purposes described in the usage and privacy policy and to maintain a record of that access that includes, among other things, the purpose for accessing the information. This bill would instead require that record of access maintained by the ALPR operator to include a brief, accurate, specific, and plain language statement describing the purpose for accessing ALPR information. The bill would include findings that changes proposed by this bill address a matter of statewide concern rather than a municipal affair and, therefore, apply to all cities, including charter cities. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law requires a vlogger to compensate a minor under 18 years of age if the minor is engaged in the work of vlogging, as specified. Existing law generally provides for the protection of minors on the internet, including by imposing certain requirements on an operator of an internet website, online service, online application, or mobile application if it is directed to minors or the operator has actual knowledge that a minor is using it. Among those provisions, existing law requires the operator to permit a minor who is a registered user to remove content or information that the user posted on the operator's internet website, online service, online application, or mobile application, as specified. This bill would require a social media platform to provide a clear and conspicuous mechanism by which a child influencer, as defined, can request a vlogger, either directly or through a specified notice process, to delete or edit certain paid content that features the child influencer as a minor, as prescribed. The bill would require the vlogger to delete or edit the content so that the child influencer is no longer featured within 10 business days of receiving the request. The bill would define "vlogger" to mean a person who is a parent, legal guardian, or family member of a child influencer who shared images or video content featuring that child influencer constituting at least 30% of the person's content shared on social media platforms and who received compensation for sharing that content featuring the child influencer. The bill would authorize a child influencer to bring a specified civil action against a vlogger who violates the bill.
Existing law, the California AI Transparency Act (CATA) , beginning August 2, 2026, generally regulates provenance data disclosure in content generated by artificial intelligence (AI) , including by requiring a covered provider to make available an AI detection tool at no cost to the user that meets certain criteria. Existing law requires a covered provider to offer the user the option to include a certain manifest disclosure in image, video, or audio content, or content that is any combination thereof, created or altered by the covered provider's generative artificial intelligence (GenAI) system and requires a covered provider to include a certain latent disclosure in AI-generated image, video, or audio content, or content that is any combination thereof, created by the covered provider's GenAI system. Existing law defines "covered provider" for these purposes to mean a person that creates, codes, or otherwise produces a generative AI system that has over 1,000,000 monthly visitors or users and is publicly accessible within the geographic boundaries of the state. This bill would recast those provisions to, among other changes, delete the user threshold from the definition of "covered provider," replace the term "AI detection tool" with "disclosure verification tool," delete the above-described requirement of a covered provider to offer the user the option to include a manifest disclosure in content, and additionally require a covered provider to include in the above-described latent disclosure whether the GenAI system created or altered the content. The bill would delay CATA's operation with respect to a GenAI system that is designed to primarily function as assistive technology, as defined, would prohibit a covered provider from falsely representing that a GenAI system is designed to primarily function as assistive technology, and would punish a covered provider who makes such a false representation with a certain civil action, as specified. This bill would declare that it is to take effect immediately as an urgency statute.
Existing law provides that in a civil action brought by a plaintiff to challenge a housing development project that meets or exceeds the requirements for low- or moderate-income housing, a defendant may seek an order requiring the plaintiff to furnish an undertaking as security for costs and damages that may be incurred by the defendant if the bringing of the action would result in preventing or delaying the project, as specified. Existing law authorizes the court to limit the amount of the undertaking or to decline to require the plaintiff to furnish an undertaking if the court determines that, based on evidence submitted by the plaintiff, furnishing an undertaking would cause the plaintiff to suffer undue economic hardship. This bill would make these provisions applicable to a student housing development, as defined. This bill would incorporate additional changes to Section 529.2 of the Code of Civil Procedure proposed by SB 1344 to be operative only if this bill and SB 1344 are enacted and this bill is enacted last.
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants to a consumer various rights with respect to personal information that is collected by a business. Among those rights, the CCPA includes the right to request that a business delete personal information that the business has collected from the consumer. This bill would expand that right to include requesting the deletion of any personal information that the business has collected about the consumer. If the business did not obtain the personal information from the consumer, the bill would allow the business to retain a record of the deletion request and the minimum data necessary to ensure the consumer's personal information remains deleted from its records and is not being used for any other purpose. The bill would make findings and declarations relating to these provisions. Existing law generally requires businesses to make certain methods of communication available for consumers to submit personal information requests, including requests for deletion and correction. If a business operates exclusively online and has a direct relationship with the consumer from whom it collects personal information, existing law requires the business to provide consumers an email address for submitting personal information requests. This bill would also require that business to make an online method, such as a web form or online portal, available to consumers for submitting personal information requests. Existing law, the California Privacy Rights Act of 2020, an initiative measure approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law establishes the California State University, under the administration of the Trustees of the California State University, as one of the segments of public postsecondary education in the state. Existing law requires the trustees to provide by rule for the government of their appointees and employees, including, among other things, rules related to appointment, classification, and duties. Existing law requires certain community college employees to be a person who meets specified minimum qualifications, as provided. This bill would explicitly require the instructor of record for a course of instruction to be a person who meets the rule provided by the trustees to serve as a faculty employee, as described, teaching credit instruction or noncredit instruction. The bill would also explicitly require a California State University faculty employee to be a person who meets the rule provided by the trustees to serve in that position.
Existing law generally regulates the business of renting passenger vehicles to the public. The law prohibits a rental company from taking various actions, including requiring the purchase of a damage waiver, optional insurance, or another optional good or service, and using electronic surveillance technology to track a renter in order to impose fines or surcharges relating to the renter's use of a rental vehicle. This bill would require any privately owned vehicle rented by, or furnished to, any federal, state, or local law enforcement agency for the use of detaining, arresting, or transporting persons who have violated, or are suspected of having violated, any law, to display a temporary decal displaying the agency name and logo, as specified. The bill would authorize certain attorneys, including the Attorney General, to pursue a civil action against the entity renting the vehicle from the private owner for failure to comply with these provisions. The bill would require the rental car contract to include a term that compliance with state law is mandatory. The bill would exempt privately owned vehicles rented or otherwise furnished or loaned to a law enforcement agency for specified purposes and rental car contracts entered into prior to January 1, 2027, from these provisions. The bill would make related findings and declarations.
Existing law establishes the California Privacy Protection Agency (CPPA) to enforce various laws protecting the privacy of individuals. If a business knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, existing law requires the business to register with the CPPA as a data broker, except as specified. Existing law requires the CPPA to establish an accessible deletion mechanism that allows a consumer to request that every data broker delete any personal information related to that consumer held by the data broker or associated service provider or contractor, as prescribed. Existing law requires, beginning August 1, 2026, a data broker to access that deletion mechanism at least once every 45 days and, among other things, process all deletion requests and delete all personal information related to the consumers making the requests, as specified. This bill would change the above-described 45-day period to a 30-day period and make conforming changes. This bill would require the Secretary of State, certain local government officials, the Judicial Council, and the State Bar of California to notify any state elected official, local elected official, or judge, as applicable, that the person may submit a request to delete that person's personal information through the above-described accessible deletion mechanism, as prescribed. By imposing additional duties on local government officials, this bill would impose a state-mandated local program. This bill would authorize the Attorney General, a county counsel, or a city attorney to bring a civil action, on behalf of an elected official or judge, against a data broker who violates certain personal information deletion requirements, as prescribed. This bill would make its provisions relating to the notice and enforcement of requests for deletion of personal information of elected officials and judges operative on July 1, 2027. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law allows an individual taxpayer to contribute amounts in excess of their personal income tax liability for the support of specified funds and accounts, including, among others, to the Native California Wildlife Rehabilitation Voluntary Tax Contribution Fund. This bill would, for taxable years beginning on or after January 1, 2026, and before January 1, 2033, allow an individual to designate on their tax return that a specified amount in excess of their tax liability be transferred to the continuously appropriated California Sea Otter Voluntary Tax Contribution Fund, which would be created by this bill. The bill would require the Franchise Tax Board to revise the tax return form to include a space for the designation of contributions to the fund. By establishing a new continuously appropriated fund, this bill would make an appropriation. The bill would also require the fund to appear on the personal income tax return for taxable years beginning on or after January 1, 2026, and before January 1, 2033. The bill would require that the above provisions remain operative only until December 1, 2033, and be repealed as of that date. However, the bill would provide for an earlier repeal if the Franchise Tax Board determines that the amount of contributions estimated to be received during the 2nd and later calendar years after its first appearance on a return will not at least equal the minimum contribution amount, in which case these provisions would be repealed on December 1 of that year. The bill would require, notwithstanding the repeal of the bill's provisions, that any contribution amounts designated prior to the repeal of the bill's provisions be transferred and disbursed in accordance with those provisions, as specified.
