Bill > AB1337

This bill updates the Information Practices Act of 1977 to modernize privacy protections and expand the scope of personal information regulations. The bill removes previous exemptions for local agencies, significantly broadens the definition of "personal information" to include a wide range of digital and traditional data types like online identifiers, geolocation data, biometric information, and neural data. It requires agencies to establish rules of conduct for handling personal information, prohibits using records for purposes other than their original collection, and introduces stricter guidelines for disclosing personal information. The bill also expands disciplinary actions for violations, making both intentional and negligent breaches of the law grounds for potential employment termination. Additionally, the bill strengthens notification requirements for data breaches, mandating detailed, plain-language notices that explain what happened, what information was involved, and what steps individuals can take to protect themselves. The legislation aims to balance the public's right to access information with individual privacy rights, recognizing the evolving landscape of digital information collection and storage.

Budget and Finance, Business and Industry, Justice

https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1337