Kevin Mullin
- Democratic
Author
(1) Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with regard to personal information relating to that consumer collected by a business, including the right to know the categories and the specific pieces of personal information that have been collected and to opt out of the sale of personal information. The act also grants a consumer the right to request a business to delete any personal information about the consumer collected by the business and requires a business to do so upon receipt of a verified request, except as specified. The act excepts certain categories of personal information and entities from its provisions, including medical information, as specified. This bill would except from the CCPA information that was deidentified in accordance with specified federal law, or was derived from medical information, protected health information, individually identifiable health information, or identifiable private information, consistent with specified federal policy, as provided. The bill also would except from the CCPA a business associate of a covered entity, as defined, that is governed by federal privacy, security, and data breach notification rules if the business associate maintains, uses, and discloses patient information in accordance with specified requirements. The bill would further except information that is collected for, used in, or disclosed in research, as defined. The bill would define terms for these purposes. This bill would additionally prohibit a business or other person from reidentifying information that was deidentified, unless a specified exception is met. The bill would, beginning January 1, 2021, require a contract for the sale or license of deidentified information to include specified provisions relating to the prohibition of reidentification, as provided. (2) The CCPA requires a business to make certain disclosures to consumers, in a specified form, in its online privacy policy, if the business has an online privacy policy, and in any California-specific description of consumers' privacy rights, or, if the business does not maintain an online privacy policy or policies, on its internet website, and to update that information at least once every 12 months. This bill would require a business that sells or discloses information that was deidentified in accordance with specified federal law, was derived from protected health information, individually identifiable health information, or identifiable private information to also disclose whether the business sells or discloses deidentified patient information derived from patient information and, if so, whether that information was deidentified pursuant to specified methods. (3) This bill would declare that it is to take effect immediately as an urgency statute.
Chaptered by Secretary of State - Chapter 172, Statutes of 2020.
Approved by the Governor.
Enrolled and presented to the Governor at 4 p.m.
Urgency clause adopted. Senate amendments concurred in. To Engrossing and Enrolling. (Ayes 74. Noes 0. Page 5514.).
Read third time. Urgency clause adopted. Passed. Ordered to the Assembly. (Ayes 37. Noes 0.).
Assembly Rule 63 suspended.
In Assembly. Concurrence in Senate amendments pending.
Read second time. Ordered to third reading.
Read third time and amended. Ordered to second reading.
Ordered to third reading.
Ordered to special consent calendar.
Read second time. Ordered to third reading.
From committee: Amend, and do pass as amended. (Ayes 7. Noes 0.) (August 20).
Read second time and amended. Ordered returned to second reading.
Withdrawn from committee.
From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on JUD.
From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on JUD.
From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on JUD.
From committee: Do pass and re-refer to Com. on RLS. (Ayes 8. Noes 0.) (January 8). Re-referred to Com. on RLS.
From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on HEALTH.
In committee: Set, first hearing. Hearing canceled at the request of author.
In Senate. Read first time. To Com. on RLS. for assignment.
Read third time. Passed. Ordered to the Senate. (Ayes 74. Noes 0. Page 2049.)
Read second time. Ordered to third reading.
From committee: Do pass. (Ayes 18. Noes 0.) (May 16).
In committee: Set, first hearing. Referred to APPR. suspense file.
Read second time. Ordered to third reading.
Re-referred to Com. on APPR. pursuant to Joint Rule 10.5.
Read second time and amended. Ordered returned to second reading.
From committee: Amend, and do pass as amended. (Ayes 15. Noes 0.) (March 26).
From printer. May be heard in committee March 22.
Read first time. To print.
| Bill Text Versions | Format |
|---|---|
| AB713 | HTML |
| 02/19/19 - Introduced | |
| 03/28/19 - Amended Assembly | |
| 01/06/20 - Amended Senate | |
| 01/23/20 - Amended Senate | |
| 06/11/20 - Amended Senate | |
| 07/29/20 - Amended Senate | |
| 08/20/20 - Amended Senate | |
| 08/28/20 - Amended Senate | |
| 09/04/20 - Enrolled | |
| 09/25/20 - Chaptered |
| Document | Format |
|---|---|
| No related documents. |
Data on Open States is updated periodically throughout the day from the official website of the California State Legislature.
If you notice any inconsistencies with these official sources, feel free to file an issue.