The Insurance Rate Reduction and Reform Act of 1988, an initiative measure enacted by Proposition 103, as approved by the voters at the November 8, 1988, statewide general election, prohibits specified insurance rates from being approved or remaining in effect that are excessive, inadequate, unfairly discriminatory, or otherwise in violation of the act. Under the act, rates and premiums for automobile insurance are determined based on specified factors, including the insured's driving safety record. Existing law authorizes the provisions of Proposition 103 to be amended by a statute that furthers the purposes of the act and is enacted by the Legislature with a 23 vote. This bill, the Consumer Driving Data Protection Act of 2026, would authorize a consumer to opt to use telematics to establish their driving record, thus amending Proposition 103. The bill would prohibit the use of telematics data for a purpose other than rating private passenger automobile insurance. The bill would require a rate application under which telematics would be used to establish an insured's driving record to include specified materials related to the insurer's telematics program. This bill would prohibit an insurer that uses telematics from taking specified actions, including conditioning eligibility for a discount upon participation in a telematics program, unless the discount is approved by the commissioner. The bill would also set forth written consent and privacy requirements for the collection and use of telematics data. The bill would authorize the commissioner to impose specified penalties for violations of the bill's provisions, including civil penalties and suspension of an insurer's telematics program. This bill would require an insurance provider or third-party vendor to take specified actions with respect to the telematics data, including immediately deleting the data once a rating has been assigned to the consumer and obtaining an express written or electronic signature of a consumer on a notice meeting specified conditions. The bill would additionally prohibit an insurance provider or third-party vendor from keeping the telematics data for longer than 6 months and collecting audio or visual recordings of the occupants of the vehicle or persons outside the vehicle, among other specified prohibitions. The bill would declare that its provisions further the purposes of Proposition 103. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.
The California Consumer Privacy Act of 2018 (CCPA) grants to a consumer various rights with respect to personal information that is collected by a business, including the right to delete personal information. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. The CCPA excludes from the definition of "personal information" publicly available information. Existing law defines "publicly available" for these purposes to include 3 types of information. One type is information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media. This bill would revise that part of the definition of "publicly available" by removing the condition that the business have a reasonable basis to believe the information is lawfully made available. The CCPA also includes in that definition of "publicly available" information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience. This bill would delete that part of the definition of "publicly available." This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law, the California Emergency Services Act, establishes the California Cybersecurity Integration Center within the Office of Emergency Services to serve as the central organizing hub of state government's cybersecurity activities and to coordinate information sharing with various entities. Existing law also requires the Technology Recovery Plan element of the State Administrative Manual to ensure the inclusion of cybersecurity strategy incident response standards for each state agency to secure its critical infrastructure controls and information, as prescribed. This bill would require, on or before July 1, 2026, an operator, defined as a state agency responsible for operating, managing, overseeing, or controlling access to critical infrastructure, that deploys a covered artificial intelligence (AI) system, as defined, to establish a human oversight mechanism that ensures a human monitors the system's operations in real time and reviews and approves any plan or action proposed by the covered AI system before execution, except as provided. The bill would require the Department of Technology to develop specialized training in AI safety protocols and risk management techniques to oversight personnel. The bill would require oversight personnel for an operator to conduct an annual assessment of its covered AI systems, as specified, and to submit a summary of the findings to the department. The bill would make findings and declarations related to its provisions. The bill would preclude disclosure of specified information by the office. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that collects sensitive personal information about the consumer to limit its use, as prescribed. Existing law defines "sensitive personal information" to mean, among other things, personal information that reveals a consumer's precise geolocation. Existing law, the California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would require a business that collects precise geolocation information to prominently display, when information is being collected, a notice to the consumer whose information is being collected that states certain information related to the collection of the information and its use by the business, including the goods or services requested by the consumer for which the business is collecting, processing, or disclosing the geolocation information and a description of how the business will process the geolocation information to carry out those purposes. This bill would prohibit a business that collects precise geolocation information from, among other things, retaining the information longer than necessary to provide the goods or services requested by the consumer or longer than one year after the consumer's last intentional interaction with the business, whichever is earlier. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law requires the State Department of Education, on or before January 1, 2024, to develop a plan to expand mental health instruction in California public schools. This bill would require the department, on or before January 1, 2028, to develop a plan to expand digital wellness instruction in California public schools, as provided.
Existing law establishes the Department of Industrial Relations in the Labor and Workforce Development Agency to administer and enforce various laws relating to employment and working conditions. This bill would require a business, as defined, to annually provide a notice to the department of all the workplace surveillance tools the employer is using in the workplace. The bill would require the notice to include, among other information, a list of the workplace surveillance tools being used that surveil employees and the categories of information being collected on employees by the workplace surveillance. The bill would also require a business to send the notice to employees and any union that represents employees of the business. The bill would make a business that violates these provisions subject to a civil penalty of $500 per violation. This bill would require the department to submit a report to the Legislature by January 1, 2029, compiling the above-described notices provided by businesses. The bill would require that the report include, among other requirements, a breakdown of notices by industry type.
Existing law requires, beginning on January 1, 2028, a vehicle with connected vehicle service to clearly indicate to a person who is inside the vehicle when a person who is outside the vehicle has accessed, among other things, connected vehicle location access. For these purposes, existing law defines "connected vehicle service" to mean any capability, including through a software application that is designed to be operated on a mobile device, to remotely obtain data from, or send commands to, a vehicle, and "connected vehicle location access" to mean a type of connected vehicle service that allows a person, who is outside of a vehicle, to view or track the location of the vehicle, as specified. If a vehicle includes connected vehicle location access, existing law requires a covered provider, as defined, to provide a mechanism that can be used by a driver who is inside a vehicle to immediately disable connected vehicle location access. Existing law delays the operation of this requirement depending on whether the vehicle was manufactured prior to, or on or after, January 1, 2028. Unless otherwise provided, a violation of the Vehicle Code constitutes an infraction. This bill would, instead, limit the provisions above to specified vehicles with connected vehicle access. The bill would apply the requirement for a vehicle with connected vehicle service to indicate to a person inside the vehicle if connected vehicle location access is enabled to all vehicles beginning with the 2031 model year. The bill would make this requirement operative beginning with the 2031 model year, for 2028, 2029, and 2030 model year vehicles, as soon as practicable after the vehicle is sold unless technologically infeasible, and on or before July 1, 2027, for 2027 model year or older vehicles unless technologically infeasible. By establishing a new duty on vehicle manufacturers, this bill would expand the general crime applicable to provisions under the Vehicle Code, thereby imposing a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason. This bill would declare that it is to take effect immediately as an urgency statute.
Existing law requires every videogame retailer to post a sign, within the retail establishment in a prominent area, providing information to consumers about a videogame rating system or notifying consumers that a rating system is available to aid in the selection of a game and to make available to consumers, upon request, information that explains the videogame rating system. Existing law, subject to certain exceptions, prohibits a seller of a digital good, including a digital application or game, from advertising or offering for sale a digital good to a purchaser with the terms "buy," "purchase," or any other term that a reasonable person would understand to confer an unrestricted ownership interest in the digital good, or alongside an option for a time-limited rental, unless the seller receives at the time of each transaction an affirmative acknowledgment from the purchaser, or the seller provides to the consumer before executing each transaction a clear and conspicuous statement, as specified. Existing law defines "digital application or game" to mean any application or game that a person accesses and manipulates using a specialized electronic gaming device, computer, mobile device, tablet, or other device with a display screen, including any add-ons or additional content for that application or game. This bill, with regard to digital games first available for purchase or rereleased for purchase on or after January 1, 2028, and subject to certain exceptions, would require a digital game operator to communicate specified information to purchasers and prospective purchasers of a digital game 60 days before the operator ceases to provide services necessary for the ordinary use of the game. The bill would, beginning on the date an operator ceases to provide services necessary for the ordinary use of the game, require the operator to provide the purchaser with, among other things, an alternate version of, a patch or update to, or a refund for, the game, as provided, and prohibit the operator from selling, leasing, or otherwise distributing a version of the game that cannot be used by a purchaser independent of services controlled by the operator. The bill would authorize the Attorney General or a district attorney to bring a civil action for a violation of these provisions.
Existing law vests the Public Utilities Commission with regulatory jurisdiction over public utilities, including electrical corporations and gas corporations, while local publicly owned electric utilities are under the direction of their governing boards. Existing law requires every public utility to furnish and maintain adequate, efficient, just, and reasonable service, instrumentalities, equipment, and facilities, as are necessary to promote the safety, health, comfort, and convenience of its customers, its employees, and the public. This bill would require the commission, on or before January 1, 2028, to adopt standards for an electrical or gas corporation's use of artificial intelligence models, as provided. The bill would require the commission to direct an electrical or gas corporation to file a plan that demonstrates the corporation's compliance with those standards. The bill would authorize the commission to prohibit an electrical or gas corporation's use of an artificial intelligence model if the commission finds that deployment of the artificial intelligence model would negatively impact the provision of safe, affordable, and reliable electrical or gas service. The bill would require each community choice aggregator and local publicly owned electric utility to adopt a policy regarding its use of an artificial intelligence model that is consistent with the standards. Under existing law, a violation of an order, decision, rule, direction, demand, or requirement of the commission is a crime. Because a violation of a commission action implementing those requirements would be a crime, this bill would impose a state-mandated local program. Additionally, by imposing new duties on local publicly owned electric utilities, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for specified reasons.
Existing law requires the Attorney General to establish and maintain various databases and information centers relating to the identification, apprehension, and prevention of crimes, including the Violent Crime Information Center and the Automated Firearms System, among others. Existing law requires a business that controls the collection of a consumer's personal information to delete that information upon the request of the consumer and provides for administrative penalties if the business fails to act on the consumer's request. This bill would, beginning January 1, 2029, require the Department of Justice to establish the Nonconsensual Intimate Image Clearinghouse to allow individuals who were exploited in California to submit a request for the removal of nonconsensual intimate images from covered platforms. The bill would define nonconsensual intimate images to include an authentic image depicting a person nude or engaging in sexual conduct distributed without consent or an image digitally altered or generated by artificial intelligence realistically depicting a person nude or engaged in sexual conduct without consent. The bill would require the department to transmit verified identifiers of images to covered platforms and require those platforms to remove verified matches within 48 hours of receipt and to prevent the images from being uploaded again. The bill would require the department to enforce these provisions and would impose civil penalties for violations. The bill would require a peace officer in the investigation of a specified offense to advise a victim that they may make a request to the clearinghouse pursuant to these provisions and would require a peace officer to provide certain information to the clearinghouse, as specified. By increasing duties for peace officers, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
