Bill > SB504

This bill, titled the Data Privacy Act, aims to enhance consumer data protection and public record access by prohibiting the sale of personal data to purchasers seeking to use it for immigration enforcement, and requiring custodians of public records to take reasonable steps to determine if records are being accessed for immigration law enforcement. It also mandates that entities operating message switching systems, which are platforms that automatically route electronic queries and responses between law enforcement agencies and databases, implement specific actions regarding system access, and requires governmental entities to establish procedures to safeguard sensitive data, defined to include information about race, ethnicity, health, sexual orientation, citizenship, immigration status, precise location, and data inferred from personal information that indicates these sensitive attributes, from being sold or redisclosed in ways that harm resident privacy, with these new provisions taking effect on July 1, 2026.