Legislationsby Glyph
CaliforniaCaliforniaLawSB 361
Data Brokers: Data Collection and Deletion
Requires data brokers registering with the California Privacy Protection Agency to disclose more of the personal information they collect, such as government ID numbers, login information and citizenship data.
Signed by the governor; Chapter 466, Statutes of 2025Oct 8, 2025 1 year ago
- Body
- California Legislature
- Session
- 2025-2026
- Introduced
- Feb 13, 2025
- In effect since
- Jan 110 months ago
- Votes
- Senate 37-0, Assembly 79-0, Senate concurrence 40-0
- Sponsors
- D (Democrat)Democrat
Timeline
Oct 8, 2025 1 year ago
Sep 10, 2025 1 year ago
Apr 24, 2025 1 year ago
Feb 13, 2025 1 year ago
Sponsors
- D (Democrat)Senator Becker
Related
CaliforniaMental Health Professionals: Artificial Intelligence
Would limit the use of AI in psychotherapy services to administrative or supplementary support and bar training models on psychotherapy data in ways inconsistent with confidentiality law.
CaliforniaWearable technology privacy bill
This bill would have regulated wearable technology devices to address privacy concerns.
CaliforniaConsumer Privacy: Deletion Requests
Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.
CaliforniaData Brokers: Deletion Mechanism: Elected Officials and Judges
Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.
CaliforniaOnline Services Accessed by Children
Repeals the enjoined Age-Appropriate Design Code Act and replaces it with similar duties requiring online services likely to be accessed by children to take reasonable steps to prevent specified risks of harm.
CaliforniaDelete Act
Requires data brokers to register with the California Privacy Protection Agency and to process consumer deletion requests submitted through a single state-run deletion mechanism.
CaliforniaCalifornia Age-Appropriate Design Code Act
Requires online services likely to be accessed by children to assess and mitigate risks to children and to configure default privacy settings to a high level of privacy.
CaliforniaCCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits
Regulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.