Bill > AB364

This bill, known as the Stop Foreign Governments from Accessing Californians' Sensitive Personal Information Act, introduces new privacy protections by amending the California Consumer Privacy Act (CCPA). The bill requires businesses to disclose to consumers if they intend to store personal information outside of the United States and prohibits maintaining such information without explicit consumer consent. Specifically, businesses must inform consumers about potential risks of storing their data internationally and obtain their explicit agreement before doing so. The bill places strict restrictions on maintaining sensitive types of personal information—including healthcare, financial, and geolocation data—outside the United States, particularly if such data would be in the custody of a foreign government or a third party controlled by a foreign government. These new requirements build upon existing CCPA provisions, which already mandate that businesses inform consumers about data collection, use, and sharing practices. By introducing these additional protections, the bill aims to give consumers more control over their personal information and prevent potential misuse of sensitive data by foreign entities. The legislation explicitly declares that it furthers the purposes of the California Privacy Rights Act of 2020, reinforcing California's commitment to robust data privacy standards.

Business and Industry

https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB364