Cybersecurity Policy Report, Updated Data Broker Requirements on Lawmakers’ Agenda in California, (Jul 7, 2025)
The California state Assembly Committee on Appropriations meets July 9 to consider a bill that would require data brokers in the state to disclose additional information regarding their data-collection practices.
SB 361 would require data brokers to provide additional information to the state, including whether a broker collects consumers’ login or account information, various government identification numbers including Social Security or passport numbers, drivers’ license information, citizenship data, union membership, sexual orientation status, gender identity and gender expression data, and biometric data. It would specifically require a data broker to disclose whether it collects consumers’ account login information or account numbers in combination with any required security code, access code, or password that would enable access to a consumer’s account by a third party.
The bill would introduce penalties for noncompliance, including fines of $200 per day for failing to register or delete information as required, with recovered fines intended to offset state court and agency costs.
The bill is sponsored by Sen. Josh Becker (D.).
News: StateLegislation DataPrivacy