Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants to a consumer various rights with respect to personal information that is collected by a business. Among those rights, the CCPA includes the right to request that a business delete personal information that the business has collected from the consumer. This bill would expand that right to include requesting the deletion of any personal information that the business has collected about the consumer. If the business did not obtain the personal information from the consumer, the bill would allow the business to retain a record of the deletion request and the minimum data necessary to ensure the consumer's personal information remains deleted from its records and is not being used for any other purpose. The bill would make findings and declarations relating to these provisions. Existing law generally requires businesses to make certain methods of communication available for consumers to submit personal information requests, including requests for deletion and correction. If a business operates exclusively online and has a direct relationship with the consumer from whom it collects personal information, existing law requires the business to provide consumers an email address for submitting personal information requests. This bill would also require that business to make an online method, such as a web form or online portal, available to consumers for submitting personal information requests. Existing law, the California Privacy Rights Act of 2020, an initiative measure approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law establishes the California State University, under the administration of the Trustees of the California State University, as one of the segments of public postsecondary education in the state. Existing law requires the trustees to provide by rule for the government of their appointees and employees, including, among other things, rules related to appointment, classification, and duties. Existing law requires certain community college employees to be a person who meets specified minimum qualifications, as provided. This bill would explicitly require the instructor of record for a course of instruction to be a person who meets the rule provided by the trustees to serve as a faculty employee, as described, teaching credit instruction or noncredit instruction. The bill would also explicitly require a California State University faculty employee to be a person who meets the rule provided by the trustees to serve in that position.
Existing law establishes the California Privacy Protection Agency (CPPA) to enforce various laws protecting the privacy of individuals. If a business knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, existing law requires the business to register with the CPPA as a data broker, except as specified. Existing law requires the CPPA to establish an accessible deletion mechanism that allows a consumer to request that every data broker delete any personal information related to that consumer held by the data broker or associated service provider or contractor, as prescribed. Existing law requires, beginning August 1, 2026, a data broker to access that deletion mechanism at least once every 45 days and, among other things, process all deletion requests and delete all personal information related to the consumers making the requests, as specified. This bill would change the above-described 45-day period to a 30-day period and make conforming changes. This bill would require the Secretary of State, certain local government officials, the Judicial Council, and the State Bar of California to notify any state elected official, local elected official, or judge, as applicable, that the person may submit a request to delete that person's personal information through the above-described accessible deletion mechanism, as prescribed. By imposing additional duties on local government officials, this bill would impose a state-mandated local program. This bill would authorize the Attorney General, a county counsel, or a city attorney to bring a civil action, on behalf of an elected official or judge, against a data broker who violates certain personal information deletion requirements, as prescribed. This bill would make its provisions relating to the notice and enforcement of requests for deletion of personal information of elected officials and judges operative on July 1, 2027. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Existing law allows an individual taxpayer to contribute amounts in excess of their personal income tax liability for the support of specified funds and accounts, including, among others, to the Native California Wildlife Rehabilitation Voluntary Tax Contribution Fund. This bill would, for taxable years beginning on or after January 1, 2026, and before January 1, 2033, allow an individual to designate on their tax return that a specified amount in excess of their tax liability be transferred to the continuously appropriated California Sea Otter Voluntary Tax Contribution Fund, which would be created by this bill. The bill would require the Franchise Tax Board to revise the tax return form to include a space for the designation of contributions to the fund. By establishing a new continuously appropriated fund, this bill would make an appropriation. The bill would also require the fund to appear on the personal income tax return for taxable years beginning on or after January 1, 2026, and before January 1, 2033. The bill would require that the above provisions remain operative only until December 1, 2033, and be repealed as of that date. However, the bill would provide for an earlier repeal if the Franchise Tax Board determines that the amount of contributions estimated to be received during the 2nd and later calendar years after its first appearance on a return will not at least equal the minimum contribution amount, in which case these provisions would be repealed on December 1 of that year. The bill would require, notwithstanding the repeal of the bill's provisions, that any contribution amounts designated prior to the repeal of the bill's provisions be transferred and disbursed in accordance with those provisions, as specified.
Under existing tax law, once a tax liability becomes due and payable, as defined, a statutory lien arises for that amount upon all real and personal property belonging to that taxpayer. Existing law establishes a statute of limitations on collections of those liabilities to limit the collection period to 20 years beginning from the date that the latest tax liability for a taxable year or the date any other liability that is not associated with a taxable year becomes due and payable, and thereafter extinguishes that liability. Existing law defines "tax liability" as a liability imposed under the Personal Income Tax Law, the Corporation Tax Law, or the laws related to the administration of franchise and income tax laws, including any additions to tax, interest, penalties, fees, and any other amounts relating to the imposed liability. This bill would redefine "tax liability" to exclude interest, penalties, costs, or fees, except a specified fee on limited liability companies, relating to the assessment of tax, any other amounts relating to the imposed liability, and any additions to tax. The bill would require the collection period for interest, penalties, costs, or fees that may accrue with a particular tax liability to lapse at the same time as the related tax liability.
Existing law vests the Public Utilities Commission with regulatory authority over public utilities, including telephone corporations. Existing law requires the commission to develop, implement, and administer a program to advance universal service by providing discounted rates to qualifying schools maintaining kindergarten or any of grades 1 to 12, inclusive, community colleges, libraries, hospitals, health clinics, and community organizations. This bill would require that the discounted rates also be provided to qualifying schools, school districts, and county offices of education serving preschools, transitional kindergarten, kindergarten, or any of grades 1 to 12, inclusive, public libraries and public library systems, rather than libraries, and noninstructional facilities operated or contracted by qualifying schools, school districts, county offices of education, community colleges, community college districts, public libraries, and public library systems, including their associated data centers or administrative offices, as provided. Existing law authorizes all customers eligible to receive discounts for telecommunications services under the federal Universal Service E-rate program to also apply for discounts on telecommunications services provided through the California Teleconnect Fund Administrative Committee Fund program. Existing law requires the commission to first apply an E-rate discount if the customer, in the determination of the commission, meets the requirements for an E-rate discount, as provided. This bill would instead require the service provider to first apply an E-rate discount, as determined by the commission, if the customer, in the determination of the commission, meets the requirements for an E-rate discount, except as provided. Under existing law, a violation of the Public Utilities Act or any order, decision, rule, direction, demand, or requirement of the commission is a crime. Because the provisions of this bill would be part of the act and a violation of a commission action implementing the bill's requirements would be a crime, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.
Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information, as specified. Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed. This bill would prohibit an operating system or an application from undoing a user's affirmative configuration of a user's privacy setting without the user's consent, except as specified. The bill would define "privacy setting" to mean any user-configurable option within an application's privacy, or similarly labeled, menu that governs the application's collection, use, sharing, disclosure, retention, or processing of the user's personal information.
Existing law vests the Public Utilities Commission with regulatory authority over public utilities, including electrical corporations, while local publicly owned electric utilities are under the direction of their governing boards. This bill would, until January 1, 2030, exempt a portable solar generation device, as defined, from all interconnection requirements imposed by state law, the commission, electrical corporation rules, or local publicly owned electric utility rules, as specified. The bill would, until January 1, 2030, prohibit an electrical corporation or a local publicly owned electric utility from requiring a customer using a portable solar generation device to take specified actions, including, among other things, paying any fee or charge related to the device or the electricity the device feeds into a building's electrical system. The bill would, until January 1, 2030, authorize an electrical corporation or a local publicly owned electric utility to require a customer using a portable solar generation device to notify the electrical corporation or local publicly owned electric utility, using a simple online registration form, of the address, make, model, and size of the portable solar generation device, as provided. Beginning January 1, 2030, the bill would prohibit the sale of a portable photovoltaic energy generation device that is designed to be connected to and disconnected from a building's electrical system through a receptacle and does not meet the definition of a portable solar generation device, as specified. Under existing law, a violation of any order, decision, rule, direction, demand, or requirement of the commission is a crime. Because a violation of a commission action implementing the bill's requirements would be a crime, the bill would impose a state-mandated local program. Additionally, by imposing new duties on local publicly owned electric utilities, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for specified reasons.
The Digital Financial Assets Law (DFAL) generally regulates digital financial asset business activity, including by prohibiting a covered person from taking certain actions with digital financial assets if that asset is a stablecoin, as defined and prescribed. The DFAL requires, among other charges, an applicant for a license to include a nonrefundable fee with an application, as specified. This bill would authorize the Department of Financial Protection and Innovation to adopt regulations to allow specified payments required under the DFAL to be made with stablecoins, as specified. This bill would become operative on July 1, 2027, and sunset its provisions on January 1, 2032.
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , imposes various obligations on businesses with respect to personal information, as defined. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. The CCPA requires a business to inform consumers of the categories of personal information to be collected and the purposes for which the categories of personal information are collected or used and whether that information is sold or shared. Existing law, the Student Online Personal Information Protection Act, prohibits an operator, as defined, from, among other things, disclosing a K–12 student's personal information, except as specified. Existing law, the Student Test Taker Privacy Protection Act, prohibits a business providing proctoring services in an educational setting from collecting, retaining, using, or disclosing personal information except to the extent necessary to provide those proctoring services and in other specified circumstances. This bill, beginning July 1, 2027, would require a business providing those proctoring services to a school district, county office of education, or charter school for classroom- or course-based exams to use end-to-end encryption, as defined, for those purposes. The bill would define "end-to-end encryption" for these purposes to mean a security method where data is encrypted on the sender's device and remains encrypted until it reaches the intended recipient's device and is unreadable by any other party, including the business providing proctoring services. The California Privacy Rights Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
