California 2019-2020 Regular Session

California Assembly Bill AB2719 Latest Draft

Bill / Introduced Version Filed 02/20/2020

                            CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 2719Introduced by Assembly Member CunninghamFebruary 20, 2020 An act to amend Section 1798.110 of the Civil Code, relating to consumer privacy. LEGISLATIVE COUNSEL'S DIGESTAB 2719, as introduced, Cunningham. California Consumer Privacy Act of 2018.Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights in connection with a business, as defined, that collects a consumers personal information. The act requires a business to make certain disclosures to consumers regarding a consumers rights under the act.This bill would make a nonsubstantive change to those provisions.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.110 of the Civil Code is amended to read:1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.

 CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 2719Introduced by Assembly Member CunninghamFebruary 20, 2020 An act to amend Section 1798.110 of the Civil Code, relating to consumer privacy. LEGISLATIVE COUNSEL'S DIGESTAB 2719, as introduced, Cunningham. California Consumer Privacy Act of 2018.Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights in connection with a business, as defined, that collects a consumers personal information. The act requires a business to make certain disclosures to consumers regarding a consumers rights under the act.This bill would make a nonsubstantive change to those provisions.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO 





 CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION

 Assembly Bill 

No. 2719

Introduced by Assembly Member CunninghamFebruary 20, 2020

Introduced by Assembly Member Cunningham
February 20, 2020

 An act to amend Section 1798.110 of the Civil Code, relating to consumer privacy. 

LEGISLATIVE COUNSEL'S DIGEST

## LEGISLATIVE COUNSEL'S DIGEST

AB 2719, as introduced, Cunningham. California Consumer Privacy Act of 2018.

Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights in connection with a business, as defined, that collects a consumers personal information. The act requires a business to make certain disclosures to consumers regarding a consumers rights under the act.This bill would make a nonsubstantive change to those provisions.

Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights in connection with a business, as defined, that collects a consumers personal information. The act requires a business to make certain disclosures to consumers regarding a consumers rights under the act.

This bill would make a nonsubstantive change to those provisions.

## Digest Key

## Bill Text

The people of the State of California do enact as follows:SECTION 1. Section 1798.110 of the Civil Code is amended to read:1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.

The people of the State of California do enact as follows:

## The people of the State of California do enact as follows:

SECTION 1. Section 1798.110 of the Civil Code is amended to read:1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.

SECTION 1. Section 1798.110 of the Civil Code is amended to read:

### SECTION 1.

1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.

1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.

1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:(1) The categories of personal information it has collected about that consumer.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) The specific pieces of personal information it has collected about that consumer.(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The categories of personal information it has collected about consumers.(2) The categories of sources from which the personal information is collected.(3) The business or commercial purpose for collecting or selling personal information.(4) The categories of third parties with whom the business shares personal information.(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.(d) This section does not require a business to do the following:(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.



1798.110. (a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:

(1) The categories of personal information it has collected about that consumer.

(2) The categories of sources from which the personal information is collected.

(3) The business or commercial purpose for collecting or selling personal information.

(4) The categories of third parties with whom the business shares personal information.

(5) The specific pieces of personal information it has collected about that consumer.

(b) A business that collects personal information about a consumer shall disclose to the consumer, pursuant to paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.

(c) A business that collects personal information about consumers shall disclose, pursuant to subparagraph (B) of paragraph (5) of subdivision (a) of Section 1798.130:

(1) The categories of personal information it has collected about consumers.

(2) The categories of sources from which the personal information is collected.

(3) The business or commercial purpose for collecting or selling personal information.

(4) The categories of third parties with whom the business shares personal information.

(5) That a consumer has the right to request the specific pieces of personal information the business has collected about that consumer.

(d) This section does not require a business to do the following:

(1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained.

(2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information.