| 1 | | - | Senate Bill No. 1194 CHAPTER 853 An act to add Section 53.5 to the Civil Code, relating to privacy. [ Approved by Governor September 27, 2018. Filed with Secretary of State September 27, 2018. ] LEGISLATIVE COUNSEL'S DIGESTSB 1194, Lara. Privacy: lodging and common carriers.Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information, including information that identifies a particular individual, such as his or her name, address, physical characteristics, or description, when the records are no longer to be retained by the business.Existing law also prohibits a public or private employer from providing voluntary consent to an immigration enforcement agent to access, review, or obtain the employers employee records without a subpoena or judicial warrant.This bill would, except as specified, prohibit specified entities that offer lodging, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a guest record, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. The bill would also similarly prohibit an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a passenger manifest, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information.(b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information.(c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel.(d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties.(e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories.(f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm.(g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure.(h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses.(i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed.SEC. 2. Section 53.5 is added to the Civil Code, to read:53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 1 | + | Enrolled September 04, 2018 Passed IN Senate August 29, 2018 Passed IN Assembly August 28, 2018 Amended IN Assembly August 24, 2018 Amended IN Assembly August 06, 2018 Amended IN Assembly June 20, 2018 Amended IN Senate May 25, 2018 Amended IN Senate May 03, 2018 Amended IN Senate March 21, 2018 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Senate Bill No. 1194Introduced by Senator LaraFebruary 15, 2018 An act to add Section 53.5 to the Civil Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGESTSB 1194, Lara. Privacy: lodging and common carriers.Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information, including information that identifies a particular individual, such as his or her name, address, physical characteristics, or description, when the records are no longer to be retained by the business.Existing law also prohibits a public or private employer from providing voluntary consent to an immigration enforcement agent to access, review, or obtain the employers employee records without a subpoena or judicial warrant.This bill would, except as specified, prohibit specified entities that offer lodging, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a guest record, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. The bill would also similarly prohibit an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a passenger manifest, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information.(b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information.(c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel.(d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties.(e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories.(f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm.(g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure.(h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses.(i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed.SEC. 2. Section 53.5 is added to the Civil Code, to read:53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 11 | 27 | | |
|---|
| 12 | 28 | | LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 13 | 29 | | |
|---|
| 14 | 30 | | ## LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 15 | 31 | | |
|---|
| 16 | 32 | | SB 1194, Lara. Privacy: lodging and common carriers. |
|---|
| 17 | 33 | | |
|---|
| 18 | 34 | | Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information, including information that identifies a particular individual, such as his or her name, address, physical characteristics, or description, when the records are no longer to be retained by the business.Existing law also prohibits a public or private employer from providing voluntary consent to an immigration enforcement agent to access, review, or obtain the employers employee records without a subpoena or judicial warrant.This bill would, except as specified, prohibit specified entities that offer lodging, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a guest record, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. The bill would also similarly prohibit an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a passenger manifest, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. |
|---|
| 19 | 35 | | |
|---|
| 20 | 36 | | Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information, including information that identifies a particular individual, such as his or her name, address, physical characteristics, or description, when the records are no longer to be retained by the business. |
|---|
| 21 | 37 | | |
|---|
| 22 | 38 | | Existing law also prohibits a public or private employer from providing voluntary consent to an immigration enforcement agent to access, review, or obtain the employers employee records without a subpoena or judicial warrant. |
|---|
| 23 | 39 | | |
|---|
| 24 | 40 | | This bill would, except as specified, prohibit specified entities that offer lodging, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a guest record, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. The bill would also similarly prohibit an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, from disclosing, producing, providing, releasing, transferring, disseminating, or otherwise communicating all or any part of a passenger manifest, as defined, orally, in writing, or by electronic or any other means to a 3rd party, other than a California peace officer, without a court-issued subpoena, warrant, or order, as specified. |
|---|
| 25 | 41 | | |
|---|
| 26 | 42 | | ## Digest Key |
|---|
| 27 | 43 | | |
|---|
| 28 | 44 | | ## Bill Text |
|---|
| 29 | 45 | | |
|---|
| 30 | 46 | | The people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information.(b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information.(c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel.(d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties.(e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories.(f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm.(g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure.(h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses.(i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed.SEC. 2. Section 53.5 is added to the Civil Code, to read:53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 31 | 47 | | |
|---|
| 32 | 48 | | The people of the State of California do enact as follows: |
|---|
| 33 | 49 | | |
|---|
| 34 | 50 | | ## The people of the State of California do enact as follows: |
|---|
| 35 | 51 | | |
|---|
| 36 | 52 | | SECTION 1. The Legislature finds and declares all of the following:(a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information.(b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information.(c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel.(d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties.(e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories.(f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm.(g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure.(h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses.(i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed. |
|---|
| 37 | 53 | | |
|---|
| 38 | 54 | | SECTION 1. The Legislature finds and declares all of the following:(a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information.(b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information.(c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel.(d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties.(e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories.(f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm.(g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure.(h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses.(i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed. |
|---|
| 39 | 55 | | |
|---|
| 40 | 56 | | SECTION 1. The Legislature finds and declares all of the following: |
|---|
| 41 | 57 | | |
|---|
| 42 | 58 | | ### SECTION 1. |
|---|
| 43 | 59 | | |
|---|
| 44 | 60 | | (a) In 1972, California voters amended the California Constitution to include the right of privacy among the inalienable rights of all people. The amendment established a legal and enforceable right of privacy for every Californian. Fundamental to this right of privacy is the ability of individuals to control the use of their personal information. |
|---|
| 45 | 61 | | |
|---|
| 46 | 62 | | (b) Since California voters approved the right of privacy, the California Legislature has adopted specific mechanisms to safeguard consumer privacy, including the California Consumer Privacy Act of 2018, the Online Privacy Protection Act, the Reader Privacy Act, the Privacy Rights for California Minors in the Digital World Act, and Shine the Light, a California law intended to give Californians the who, what, where, and when of how businesses handle consumers personal information. |
|---|
| 47 | 63 | | |
|---|
| 48 | 64 | | (c) Californians frequently have to disclose their sensitive personal information to third parties in order to accomplish routine activities: apply for a job; apply for housing; raise a child; drive a car or take transportation; or stay at a hotel or motel. |
|---|
| 49 | 65 | | |
|---|
| 50 | 66 | | (d) California law has not kept pace with these developments and the personal privacy implications surrounding the collection, use, and protection of personal information by third parties. |
|---|
| 51 | 67 | | |
|---|
| 52 | 68 | | (e) Many businesses collect personal information from California consumers. They may know where a consumer lives, how many children a consumer has, where a consumer lives and works, where a consumer travels and where they stay on their trip, how fast a consumer drives, a consumers personality, sleep habits, biometric and health information, financial information, precise geolocation information, and social networks, to name a few categories. |
|---|
| 53 | 69 | | |
|---|
| 54 | 70 | | (f) The unauthorized disclosure of personal information and the loss of privacy can have devastating effects for individuals, including financial fraud, identity theft, unnecessary costs to personal time and finances, destruction of property, harassment, reputational damage, emotional stress, and even potential physical harm. |
|---|
| 55 | 71 | | |
|---|
| 56 | 72 | | (g) When Californians leave their homes to travel via bus or stay at lodging establishments throughout their state, they desire assurances that these businesses will respect their privacy and safeguard their personal information from improper disclosure. |
|---|
| 57 | 73 | | |
|---|
| 58 | 74 | | (h) Protecting the privacy of personal information promotes consumer confidence and encourages both residents and visitors to travel to and within California and to patronize California businesses. |
|---|
| 59 | 75 | | |
|---|
| 60 | 76 | | (i) Therefore, it is the intent of the Legislature to further Californians right to privacy by ensuring that the personal information disclosed by patrons of lodging establishments and bus companies is used for the intended business purposes and not improperly disclosed. |
|---|
| 61 | 77 | | |
|---|
| 62 | 78 | | SEC. 2. Section 53.5 is added to the Civil Code, to read:53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 63 | 79 | | |
|---|
| 64 | 80 | | SEC. 2. Section 53.5 is added to the Civil Code, to read: |
|---|
| 65 | 81 | | |
|---|
| 66 | 82 | | ### SEC. 2. |
|---|
| 67 | 83 | | |
|---|
| 68 | 84 | | 53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 69 | 85 | | |
|---|
| 70 | 86 | | 53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 71 | 87 | | |
|---|
| 72 | 88 | | 53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order.(b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number.(d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section.(f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d).(h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services.(i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section.(j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law.(k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|
| 73 | 89 | | |
|---|
| 74 | 90 | | |
|---|
| 75 | 91 | | |
|---|
| 76 | 92 | | 53.5. (a) Notwithstanding any other law, except as specified in this section, an innkeeper, hotelkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodations, or any employee or agent thereof, who offers or accepts payment for rooms, sleeping accommodations, or board and lodging, or other similar accommodation, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a guest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. |
|---|
| 77 | 93 | | |
|---|
| 78 | 94 | | (b) Notwithstanding any other law, except as specified in this section, an owner or operator of a private or charter bus transportation company, or any employee or agent thereof, shall not disclose, produce, provide, release, transfer, disseminate, or otherwise communicate, except to a California peace officer, all or any part of a passenger manifest record orally, in writing, or by electronic or any other means to a third party without a court-issued subpoena, warrant, or order. |
|---|
| 79 | 95 | | |
|---|
| 80 | 96 | | (c) Guest record for purposes of this section includes any record that identifies an individual guest, boarder, occupant, lodger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. |
|---|
| 81 | 97 | | |
|---|
| 82 | 98 | | (d) Passenger manifest record for purposes of this section includes any record that identifies an individual guest, passenger, customer, or invitee, including, but not limited to, his or her name, social security number or other unique identifying number, date of birth, location of birth, address, telephone number, drivers license number, other official form of identification, credit card number, or automobile license plate number. |
|---|
| 83 | 99 | | |
|---|
| 84 | 100 | | (e) Court issued subpoena, warrant, or order for purposes of this section is limited to subpoenas, warrants, or orders issued by a judicial officer. An administrative subpoena, warrant, or order is not sufficient for purposes of this section. |
|---|
| 85 | 101 | | |
|---|
| 86 | 102 | | (f) Third-party service provider, for the purposes of this section, means an entity contracted to provide services outlined in the contract that has no independent right to use or share the data beyond the terms of the contract. Records shared with a third-party service provider shall be subject to limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section. |
|---|
| 87 | 103 | | |
|---|
| 88 | 104 | | (g) This section shall not be construed to prevent a government entity from requiring a private business to provide business records during an audit or inspection if those records omit the personal information described in subdivisions (c) and (d). |
|---|
| 89 | 105 | | |
|---|
| 90 | 106 | | (h) This section shall not be construed to prevent a private business from providing business records containing a guests or passengers name, address, credit card number, or drivers license number to a third-party service provider, if required, for the sole purpose of effectuating financial payment, including, approving or processing negotiable instruments, electronic fund transfers, or similar methods of payment, from a guest or passenger to the private business for a good or service, or from providing business records to a third-party service provider that the private business contracts with for business-related services. |
|---|
| 91 | 107 | | |
|---|
| 92 | 108 | | (i) This section shall not be construed to prevent a private business from providing, where required, business records to a government entity in order to comply with state and federal laws regarding financial oversight and privacy, including, but not limited to, the federal Gramm-Leach-Bliley Act (12 U.S.C. Sec. 6801). Records shared with a government entity or in compliance with the federal Gramm-Leach-Bliley Act shall be subject to the limitations on further disclosure as described in subdivisions (a) and (b), except as otherwise permitted by this section. |
|---|
| 93 | 109 | | |
|---|
| 94 | 110 | | (j) This section shall not be construed to prevent a private business from disclosing records in a criminal investigation if a law enforcement officer in good faith believes that an emergency involving imminent danger of death or serious bodily injury to a person requires a warrantless search, to the extent permitted by law. |
|---|
| 95 | 111 | | |
|---|
| 96 | 112 | | (k) This section shall not be construed to compel disclosure of a guest record or passenger manifest record by an inkeeper, motelkeeper, lodginghouse keeper, or owner or operator of an inn, hotel, motel, lodginghouse, or other similar accommodation, or an owner or operator of a private or charter bus transportation company, in the absence of a court-issued subpoena, warrant, or order. |
|---|