The California Constitution provides that people have the right of access to information concerning the conduct of the people's business. Various provisions of existing law, including the California Public Records Act, the Legislative Open Records Act, the Bagley-Keene Open Meeting Act, and the Ralph M. Brown Act, provide, with some exceptions, for public access to government records and meetings of government bodies. Among those acts, the California Public Records Act defines "person" to include any natural person, corporation, partnership, limited liability company, firm, or association. Existing law, the Administrative Procedure Act, governs, among other things, the procedures for the adoption, amendment, or repeal of regulations by state agencies and for the review of those regulatory actions by the Office of Administrative Law. Existing law, the California Environmental Quality Act (CEQA) , requires a lead agency, as defined, to prepare, or cause to be prepared, and certify the completion of an environmental impact report on a project that it proposes to carry out or approve that may have a significant effect on the environment or to adopt a negative declaration if it finds that the project will not have that effect. CEQA defines "person" to include any person, firm, association, organization, partnership, business, trust, corporation, limited liability company, company, district, county, city and county, city, town, and, among other things, the state. Existing law, the California Coastal Act of 1976, establishes the California Coastal Commission and prescribes procedures for the preparation, approval, and certification of local coastal programs that regulate development in the coastal zone, as defined, in jurisdictions that have a certified local coastal program. This bill would specify that, for purposes of the California Public Records Act, the Bagley-Keene Open Meeting Act, the Ralph M. Brown Act, the Legislative Open Records Act, the Administrative Procedure Act, the California Coastal Act of 1976, and CEQA, "person," "interested person," "participant," "member of the public," as applicable, and any other similar terms under each act referring to those who may engage with governmental agencies, do not include artificial intelligence, as defined, systems, autonomous agents, or robots, whether physical or digital. The bill would authorize governmental agencies to use a disclosure verification tool to determine if artificial intelligence is present. The bill would make findings and declarations related to these provisions. The bill would prohibit a person from knowingly using artificial intelligence to falsely represent that a natural person appeared before, submitted information to, or otherwise engaged with a governmental agency. The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose. This bill would make legislative findings to that effect.
Existing law establishes the California Privacy Protection Agency (CPPA) to enforce various laws protecting the privacy of individuals. If a business knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, existing law requires the business to register with the CPPA as a data broker, except as specified. Existing law requires the CPPA to establish an accessible deletion mechanism that allows a consumer to request that every data broker delete any personal information related to that consumer held by the data broker or associated service provider or contractor, as prescribed. Existing law requires, beginning August 1, 2026, a data broker to access that deletion mechanism at least once every 45 days and, among other things, process all deletion requests and delete all personal information related to the consumers making the requests, as specified. This bill would change the above-described 45-day period to a 30-day period and make conforming changes. This bill would require the Secretary of State, certain local government officials, the Judicial Council, and the State Bar of California to notify any state elected official, local elected official, or judge, as applicable, that the person may submit a request to delete that person's personal information through the above-described accessible deletion mechanism, as prescribed. By imposing additional duties on local government officials, this bill would impose a state-mandated local program. This bill would authorize the Attorney General, a county counsel, or a city attorney to bring a civil action, on behalf of an elected official or judge, against a data broker who violates certain personal information deletion requirements, as prescribed. This bill would make its provisions relating to the notice and enforcement of requests for deletion of personal information of elected officials and judges operative on July 1, 2027. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
