| 1 | 1 | | CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 1758Introduced by Assembly Member ChauFebruary 22, 2019 An act to amend Section 1798.100 of the Civil Code, relating to consumer privacy. LEGISLATIVE COUNSEL'S DIGESTAB 1758, as introduced, Chau. Consumer privacy.Existing law, the California Consumer Privacy Act of 2018, commencing on January 1, 2020, grants a consumer various rights in connection with a business, as defined, that collects the consumers personal information. Among these rights, the act authorizes a consumer to request that a business that collects a consumers personal information to disclose to the consumer the categories and specific pieces of personal information that it has collected. The act does not require a business to retain personal information collected for a single, one-time transaction if that information is not sold or retained by the business.This bill would make a nonsubstantive change to that provision.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.100 of the Civil Code is amended to read:1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 2 | 2 | | |
|---|
| 3 | 3 | | CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 1758Introduced by Assembly Member ChauFebruary 22, 2019 An act to amend Section 1798.100 of the Civil Code, relating to consumer privacy. LEGISLATIVE COUNSEL'S DIGESTAB 1758, as introduced, Chau. Consumer privacy.Existing law, the California Consumer Privacy Act of 2018, commencing on January 1, 2020, grants a consumer various rights in connection with a business, as defined, that collects the consumers personal information. Among these rights, the act authorizes a consumer to request that a business that collects a consumers personal information to disclose to the consumer the categories and specific pieces of personal information that it has collected. The act does not require a business to retain personal information collected for a single, one-time transaction if that information is not sold or retained by the business.This bill would make a nonsubstantive change to that provision.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO |
|---|
| 4 | 4 | | |
|---|
| 5 | 5 | | |
|---|
| 6 | 6 | | |
|---|
| 7 | 7 | | |
|---|
| 8 | 8 | | |
|---|
| 9 | 9 | | CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION |
|---|
| 10 | 10 | | |
|---|
| 11 | 11 | | Assembly Bill No. 1758 |
|---|
| 12 | 12 | | |
|---|
| 13 | 13 | | Introduced by Assembly Member ChauFebruary 22, 2019 |
|---|
| 14 | 14 | | |
|---|
| 15 | 15 | | Introduced by Assembly Member Chau |
|---|
| 16 | 16 | | February 22, 2019 |
|---|
| 17 | 17 | | |
|---|
| 18 | 18 | | An act to amend Section 1798.100 of the Civil Code, relating to consumer privacy. |
|---|
| 19 | 19 | | |
|---|
| 20 | 20 | | LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 21 | 21 | | |
|---|
| 22 | 22 | | ## LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 23 | 23 | | |
|---|
| 24 | 24 | | AB 1758, as introduced, Chau. Consumer privacy. |
|---|
| 25 | 25 | | |
|---|
| 26 | 26 | | Existing law, the California Consumer Privacy Act of 2018, commencing on January 1, 2020, grants a consumer various rights in connection with a business, as defined, that collects the consumers personal information. Among these rights, the act authorizes a consumer to request that a business that collects a consumers personal information to disclose to the consumer the categories and specific pieces of personal information that it has collected. The act does not require a business to retain personal information collected for a single, one-time transaction if that information is not sold or retained by the business.This bill would make a nonsubstantive change to that provision. |
|---|
| 27 | 27 | | |
|---|
| 28 | 28 | | Existing law, the California Consumer Privacy Act of 2018, commencing on January 1, 2020, grants a consumer various rights in connection with a business, as defined, that collects the consumers personal information. Among these rights, the act authorizes a consumer to request that a business that collects a consumers personal information to disclose to the consumer the categories and specific pieces of personal information that it has collected. The act does not require a business to retain personal information collected for a single, one-time transaction if that information is not sold or retained by the business. |
|---|
| 29 | 29 | | |
|---|
| 30 | 30 | | This bill would make a nonsubstantive change to that provision. |
|---|
| 31 | 31 | | |
|---|
| 32 | 32 | | ## Digest Key |
|---|
| 33 | 33 | | |
|---|
| 34 | 34 | | ## Bill Text |
|---|
| 35 | 35 | | |
|---|
| 36 | 36 | | The people of the State of California do enact as follows:SECTION 1. Section 1798.100 of the Civil Code is amended to read:1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 37 | 37 | | |
|---|
| 38 | 38 | | The people of the State of California do enact as follows: |
|---|
| 39 | 39 | | |
|---|
| 40 | 40 | | ## The people of the State of California do enact as follows: |
|---|
| 41 | 41 | | |
|---|
| 42 | 42 | | SECTION 1. Section 1798.100 of the Civil Code is amended to read:1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 43 | 43 | | |
|---|
| 44 | 44 | | SECTION 1. Section 1798.100 of the Civil Code is amended to read: |
|---|
| 45 | 45 | | |
|---|
| 46 | 46 | | ### SECTION 1. |
|---|
| 47 | 47 | | |
|---|
| 48 | 48 | | 1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 49 | 49 | | |
|---|
| 50 | 50 | | 1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 51 | 51 | | |
|---|
| 52 | 52 | | 1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.(b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|
| 53 | 53 | | |
|---|
| 54 | 54 | | |
|---|
| 55 | 55 | | |
|---|
| 56 | 56 | | 1798.100. (a) A consumer shall have the right to request that a business that collects a consumers personal information disclose to that consumer the categories and specific pieces of personal information the business has collected. |
|---|
| 57 | 57 | | |
|---|
| 58 | 58 | | (b) A business that collects a consumers personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section. |
|---|
| 59 | 59 | | |
|---|
| 60 | 60 | | (c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request. |
|---|
| 61 | 61 | | |
|---|
| 62 | 62 | | (d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period. |
|---|
| 63 | 63 | | |
|---|
| 64 | 64 | | (e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such that information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. |
|---|