Bill > SF4221

This bill expands the existing law that prohibits the dissemination of personal information to include all individuals, not just law enforcement officials, and creates a new civil cause of action for damages. Specifically, it allows individuals to sue someone who knowingly and without consent makes their personal information, or that of their family or household members, publicly available if this dissemination poses an imminent and serious threat to their safety and the disseminator knew or should have known about the threat. The bill defines "personal information" broadly to include things like home addresses, phone numbers, and details about minor children, and allows for damages including mental anguish, a civil penalty of up to $10,000, and attorney fees, as well as other equitable relief. There are exceptions for lawful criminal investigations, reporting unlawful conduct, matters of public interest, legal proceedings, and information authorized or required by law, and the bill clarifies it does not alter protections under federal law for online platforms. The changes are set to take effect on August 1, 2026.