Bill > AB1337

This bill, effective January 1, 2028, significantly updates the Information Practices Act of 1977, which governs how agencies (government bodies) collect, store, and share personal information. Key changes include removing the exemption for local agencies, meaning cities, counties, and other local public bodies will now be subject to the same privacy rules as state agencies. The definition of "personal information" is expanded to encompass a broader range of data. The bill also revises requirements for providing notice to individuals about data collection, changing periodic notices from annually to at least every three years. It clarifies rules for agencies regarding the use of personal information, ensuring it's only used for its original purpose unless otherwise permitted by law, and introduces provisions for collective bargaining agreements to influence these rules. The bill also modifies the circumstances under which personal information can be disclosed, allowing for more specific disclosures related to real property, social safety net programs, and medical information. Furthermore, it expands the grounds for disciplinary action against agency employees to include negligent violations of the act and makes intentional disclosure of sensitive medical information a misdemeanor even without resulting economic loss or personal injury. Finally, the bill includes legislative findings to justify these changes as necessary to balance public access to government information with individual privacy rights in the digital age.