Amended IN Senate July 14, 2020 Amended IN Senate May 29, 2020 Amended IN Senate August 12, 2019 Amended IN Senate July 11, 2019 Amended IN Senate June 24, 2019 Amended IN Assembly April 08, 2019 Amended IN Assembly March 21, 2019 CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 660Introduced by Assembly Member LevineFebruary 15, 2019An act to add Section 10360 to the Public Contract Code, relating to public contracts. Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information.LEGISLATIVE COUNSEL'S DIGESTAB 660, as amended, Levine. Public contracts: privacy: Personal information: contact tracing.Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Other existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to know the categories and the specific pieces of personal information that have been collected and to opt out of the sale of personal information. The CCPA also grants a consumer the right to request a business to delete any personal information about the consumer collected by the business and requires a business to do so upon receipt of a verified request, except as specified. The CCPA exempts certain categories of personal information and entities from its provisions, including a health care provider or a covered entity governed by certain federal privacy, security, and data breach notification rules if the health care provider or covered entity maintains information in accordance with specified requirements.This bill would prohibit data collected, received, or prepared for purposes of contact tracing from being shared with any entity other than a public health entity. The bill would prohibit a law enforcement official from engaging in contact tracing. The bill would define terms for its purposes.Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect.The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect.Existing law governs contracts entered into by a state agency for services to be rendered to the state. A willful violation of that law is punishable as a misdemeanor.This bill would require a contract entered into by a state agency for services related to contact tracing to include certain provisions, including that a contractor may share personal information obtained via a contact tracing application or service only to comply with a warrant or subpoena or to facilitate a public health providers efforts to mitigate the spread of a communicable disease. By expanding the scope of a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: YESNO Bill TextThe people of the State of California do enact as follows:SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.1798.602. A law enforcement official shall not engage in contact tracing.SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SECTION 1.Section 10360 is added to the Public Contract Code, to read:10360.(a)A contract entered into by a state agency for services related to contact tracing shall include all of the following provisions:(1)The contractor may share personal information obtained via a contact tracing application or service only for an authorized purpose.(2)(A)A contact tracing application or service subject to a contract described in paragraph (1) shall conspicuously notify a user of the authorized purposes described in paragraph (1) of subdivision (b) for which the users personal information may be used.(B)A contact tracing application shall notify a user that the authorized purposes described in paragraph (1) of subdivision (b) are the only purposes for which a users personal information may be used.(b)For purposes of this section:(1)Authorized purpose means either of the following:(A)To comply with a warrant or subpoena.(B)To facilitate a public health providers efforts to mitigate the spread of a communicable disease.(2)Contact tracing means the use of a persons geolocation data gathered from a mobile device for the purpose of determining possible exposure to a communicable disease.(3)Personal information means information that identifies or describes a particular individual.SEC. 2.No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.
Amended IN Senate July 14, 2020 Amended IN Senate May 29, 2020 Amended IN Senate August 12, 2019 Amended IN Senate July 11, 2019 Amended IN Senate June 24, 2019 Amended IN Assembly April 08, 2019 Amended IN Assembly March 21, 2019 CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 660Introduced by Assembly Member LevineFebruary 15, 2019An act to add Section 10360 to the Public Contract Code, relating to public contracts. Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information.LEGISLATIVE COUNSEL'S DIGESTAB 660, as amended, Levine. Public contracts: privacy: Personal information: contact tracing.Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Other existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to know the categories and the specific pieces of personal information that have been collected and to opt out of the sale of personal information. The CCPA also grants a consumer the right to request a business to delete any personal information about the consumer collected by the business and requires a business to do so upon receipt of a verified request, except as specified. The CCPA exempts certain categories of personal information and entities from its provisions, including a health care provider or a covered entity governed by certain federal privacy, security, and data breach notification rules if the health care provider or covered entity maintains information in accordance with specified requirements.This bill would prohibit data collected, received, or prepared for purposes of contact tracing from being shared with any entity other than a public health entity. The bill would prohibit a law enforcement official from engaging in contact tracing. The bill would define terms for its purposes.Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect.The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect.Existing law governs contracts entered into by a state agency for services to be rendered to the state. A willful violation of that law is punishable as a misdemeanor.This bill would require a contract entered into by a state agency for services related to contact tracing to include certain provisions, including that a contractor may share personal information obtained via a contact tracing application or service only to comply with a warrant or subpoena or to facilitate a public health providers efforts to mitigate the spread of a communicable disease. By expanding the scope of a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: YESNO
Amended IN Senate July 14, 2020 Amended IN Senate May 29, 2020 Amended IN Senate August 12, 2019 Amended IN Senate July 11, 2019 Amended IN Senate June 24, 2019 Amended IN Assembly April 08, 2019 Amended IN Assembly March 21, 2019
Amended IN Senate July 14, 2020
Amended IN Senate May 29, 2020
Amended IN Senate August 12, 2019
Amended IN Senate July 11, 2019
Amended IN Senate June 24, 2019
Amended IN Assembly April 08, 2019
Amended IN Assembly March 21, 2019
CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION
Assembly Bill
No. 660
Introduced by Assembly Member LevineFebruary 15, 2019
Introduced by Assembly Member Levine
February 15, 2019
An act to add Section 10360 to the Public Contract Code, relating to public contracts. Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information.
LEGISLATIVE COUNSEL'S DIGEST
## LEGISLATIVE COUNSEL'S DIGEST
AB 660, as amended, Levine. Public contracts: privacy: Personal information: contact tracing.
Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Other existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to know the categories and the specific pieces of personal information that have been collected and to opt out of the sale of personal information. The CCPA also grants a consumer the right to request a business to delete any personal information about the consumer collected by the business and requires a business to do so upon receipt of a verified request, except as specified. The CCPA exempts certain categories of personal information and entities from its provisions, including a health care provider or a covered entity governed by certain federal privacy, security, and data breach notification rules if the health care provider or covered entity maintains information in accordance with specified requirements.This bill would prohibit data collected, received, or prepared for purposes of contact tracing from being shared with any entity other than a public health entity. The bill would prohibit a law enforcement official from engaging in contact tracing. The bill would define terms for its purposes.Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect.The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect.Existing law governs contracts entered into by a state agency for services to be rendered to the state. A willful violation of that law is punishable as a misdemeanor.This bill would require a contract entered into by a state agency for services related to contact tracing to include certain provisions, including that a contractor may share personal information obtained via a contact tracing application or service only to comply with a warrant or subpoena or to facilitate a public health providers efforts to mitigate the spread of a communicable disease. By expanding the scope of a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.
Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.
Other existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to know the categories and the specific pieces of personal information that have been collected and to opt out of the sale of personal information. The CCPA also grants a consumer the right to request a business to delete any personal information about the consumer collected by the business and requires a business to do so upon receipt of a verified request, except as specified. The CCPA exempts certain categories of personal information and entities from its provisions, including a health care provider or a covered entity governed by certain federal privacy, security, and data breach notification rules if the health care provider or covered entity maintains information in accordance with specified requirements.
This bill would prohibit data collected, received, or prepared for purposes of contact tracing from being shared with any entity other than a public health entity. The bill would prohibit a law enforcement official from engaging in contact tracing. The bill would define terms for its purposes.
Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.
This bill would make legislative findings to that effect.
The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.
This bill would make legislative findings to that effect.
Existing law governs contracts entered into by a state agency for services to be rendered to the state. A willful violation of that law is punishable as a misdemeanor.
This bill would require a contract entered into by a state agency for services related to contact tracing to include certain provisions, including that a contractor may share personal information obtained via a contact tracing application or service only to comply with a warrant or subpoena or to facilitate a public health providers efforts to mitigate the spread of a communicable disease. By expanding the scope of a crime, this bill would impose a state-mandated local program.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.
## Digest Key
## Bill Text
The people of the State of California do enact as follows:SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.1798.602. A law enforcement official shall not engage in contact tracing.SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SECTION 1.Section 10360 is added to the Public Contract Code, to read:10360.(a)A contract entered into by a state agency for services related to contact tracing shall include all of the following provisions:(1)The contractor may share personal information obtained via a contact tracing application or service only for an authorized purpose.(2)(A)A contact tracing application or service subject to a contract described in paragraph (1) shall conspicuously notify a user of the authorized purposes described in paragraph (1) of subdivision (b) for which the users personal information may be used.(B)A contact tracing application shall notify a user that the authorized purposes described in paragraph (1) of subdivision (b) are the only purposes for which a users personal information may be used.(b)For purposes of this section:(1)Authorized purpose means either of the following:(A)To comply with a warrant or subpoena.(B)To facilitate a public health providers efforts to mitigate the spread of a communicable disease.(2)Contact tracing means the use of a persons geolocation data gathered from a mobile device for the purpose of determining possible exposure to a communicable disease.(3)Personal information means information that identifies or describes a particular individual.SEC. 2.No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.
The people of the State of California do enact as follows:
## The people of the State of California do enact as follows:
SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.1798.602. A law enforcement official shall not engage in contact tracing.
SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:
### SECTION 1.
TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.1798.602. A law enforcement official shall not engage in contact tracing.
TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.1798.602. A law enforcement official shall not engage in contact tracing.
TITLE 1.81.10. Contact Tracing
TITLE 1.81.10. Contact Tracing
1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.
1798.600. As used in this title:
(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.
(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.
(c) Law enforcement official means any local agency or officer of a local agency authorized to enforce criminal statutes, regulations, or local ordinances or to operate jails or to maintain custody of individuals in jails, and any person or local agency authorized to operate juvenile detention facilities or to maintain custody of individuals in juvenile detention facilities. Law enforcement official for purposes of this title also includes staff of a district attorney.
(d) Public health entity means a state or local public entity that is responsible for public health matters as part of its official mandate.
1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.
1798.601. Data collected, received, or prepared for purposes of contact tracing shall not be shared with any entity other than a public health entity.
1798.602. A law enforcement official shall not engage in contact tracing.
1798.602. A law enforcement official shall not engage in contact tracing.
SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:
### SEC. 2.
This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 of the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:
### SEC. 3.
This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.
(a)A contract entered into by a state agency for services related to contact tracing shall include all of the following provisions:
(1)The contractor may share personal information obtained via a contact tracing application or service only for an authorized purpose.
(2)(A)A contact tracing application or service subject to a contract described in paragraph (1) shall conspicuously notify a user of the authorized purposes described in paragraph (1) of subdivision (b) for which the users personal information may be used.
(B)A contact tracing application shall notify a user that the authorized purposes described in paragraph (1) of subdivision (b) are the only purposes for which a users personal information may be used.
(b)For purposes of this section:
(1)Authorized purpose means either of the following:
(A)To comply with a warrant or subpoena.
(B)To facilitate a public health providers efforts to mitigate the spread of a communicable disease.
(2)Contact tracing means the use of a persons geolocation data gathered from a mobile device for the purpose of determining possible exposure to a communicable disease.
(3)Personal information means information that identifies or describes a particular individual.
No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.