California: Bill to amend data broker privacy provisions under CCPA referred to Committee on Rules
Senate Bill ('SB') 1059 for an act to amend certain Sections of the California Civil Code with respect to privacy and data brokers was referred, on 8 March 2022, to the California Committee on Rules, following its introduction on 15 February 2022. In particular, the bill would:
- include a business that knowingly collects and shares certain personal information to third parties, within the definition of 'data broker';
- transfer authority and responsibilities under the provisions relating to data broker registration from the California Attorney General ('AG') to the California Consumer Privacy Act of 2018 ('CCPA'), including by requiring data brokers to annually register with the California Privacy Protection Agency ('CPPA'), while providing the AG with the power to bring an action against a data broker that fails to register;
- require data brokers to provide additional information to the CPPA during the registration process;
- increase the civil penalty for failing to register to $200 for each day the data broker fails to register; and
- require the CPPA to adopt regulations in compliance with the Administrative Procedure Act on or before 1 January 2024, and make other technical changes.
You can read the bill and track its progress here.