Bill > SB361

This bill modifies California's data broker registration requirements by expanding the information that data brokers must provide to the California Privacy Protection Agency (CPPA) when registering. Under the new requirements, data brokers must disclose additional details about their data collection practices, including whether they collect specific types of personal information like names, dates of birth, email addresses, government identification numbers, and biometric data. The bill also mandates that data brokers report whether they have shared or sold consumers' data to foreign actors, the federal government, state governments, law enforcement, or developers of generative AI systems in the past year. Data brokers will be required to provide up to three, but at least one, of their most common types of personal information collected. The bill introduces new administrative fines for data brokers who fail to register or comply with deletion requests and requires data brokers to process denied deletion requests within 45 days. Additionally, the bill prohibits the CPPA from publicly displaying certain sensitive registration information, such as specific types of personal information collected. The legislation aims to enhance consumer privacy protections by increasing transparency and providing more control over personal data collection and sharing practices.

Budget and Finance, Business and Industry, Justice

https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB361