California 2019-2020 Regular Session

California Senate Bill SB1022 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
1		-	~~Amended IN Senate March 25, 2020~~ CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Senate Bill No. 1022Introduced by Senator UmbergFebruary 14, 2020 An act to amend Section 4051 of the Financial ~~1798.115 of the Civil~~ Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGESTSB 1022, as ~~amended~~, Umberg. Privacy. Personal information: disclosure.Existing law, the California Consumer Protection Act of 2018 (CCPA) grants a consumer various rights with regard to personal information relating to that consumer collected by a business, including the right to know the categories and the specific pieces of personal information that a business collects and to opt out of the sale of personal information. With regard to information sold to a third party about a consumer by a business, the CCPA prohibits the third party from selling that information unless the consumer has received notice, as specified, and an opportunity to exercise the right to opt out of the sale. Existing law commits the regulatory authority for these provisions with the Attorney General.This bill would require that a consumers election to opt out of the sale of personal information, as described above, remain effective after the company that holds the information, or the information itself, is sold. Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: ~~NOYES~~ Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.115 of the Civil Code is amended to read:1798.115. (a) A consumer shall have the right to request that a business that sells the consumers personal information, or that discloses it for a business purpose, disclose to that consumer:(1) The categories of personal information that the business collected about the consumer.(2) The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the sale of personal information about the consumer as described in paragraph (1) shall remain effective after the entity that holds the information, or the information itself, is sold.SECTION 1.Section 4051 of the Financial Code is amended to read:4051.(a)The Legislature intends for financial institutions to provide their consumers notice and meaningful choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b)It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
	1	+	CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Senate Bill No. 1022Introduced by Senator UmbergFebruary 14, 2020 An act to amend Section 4051 of the Financial Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGESTSB 1022, as introduced, Umberg. Privacy.Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 4051 of the Financial Code is amended to read:4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
2	2
3		-	~~Amended IN Senate March 25, 2020~~ CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Senate Bill No. 1022Introduced by Senator UmbergFebruary 14, 2020 An act to amend Section 4051 of the Financial ~~1798.115 of the Civil~~ Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGESTSB 1022, as ~~amended~~, Umberg. Privacy. Personal information: disclosure.Existing law, the California Consumer Protection Act of 2018 (CCPA) grants a consumer various rights with regard to personal information relating to that consumer collected by a business, including the right to know the categories and the specific pieces of personal information that a business collects and to opt out of the sale of personal information. With regard to information sold to a third party about a consumer by a business, the CCPA prohibits the third party from selling that information unless the consumer has received notice, as specified, and an opportunity to exercise the right to opt out of the sale. Existing law commits the regulatory authority for these provisions with the Attorney General.This bill would require that a consumers election to opt out of the sale of personal information, as described above, remain effective after the company that holds the information, or the information itself, is sold. Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: ~~NOYES~~ Local Program: NO
	3	+	CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Senate Bill No. 1022Introduced by Senator UmbergFebruary 14, 2020 An act to amend Section 4051 of the Financial Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGESTSB 1022, as introduced, Umberg. Privacy.Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO
4	4
5		-	Amended IN Senate March 25, 2020
6	5
7		-	Amended IN Senate March 25, 2020
	6	+
	7	+
8	8
9	9		CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION
10	10
11	11		Senate Bill
12	12
13	13		No. 1022
14	14
15	15		Introduced by Senator UmbergFebruary 14, 2020
16	16
17	17		Introduced by Senator Umberg
18	18		February 14, 2020
19	19
20		-	An act to amend Section 4051 of the Financial ~~1798.115 of the Civil~~ Code, relating to privacy.
	20	+	An act to amend Section 4051 of the Financial Code, relating to privacy.
21	21
22	22		LEGISLATIVE COUNSEL'S DIGEST
23	23
24	24		## LEGISLATIVE COUNSEL'S DIGEST
25	25
26		-	SB 1022, as ~~amended~~, Umberg. Privacy. ~~Personal information: disclosure.~~
	26	+	SB 1022, as introduced, Umberg. Privacy.
27	27
28		-	Existing law, the California Consumer Protection Act of 2018 (CCPA) grants a consumer various rights with regard to personal information relating to that consumer collected by a business, including the right to know the categories and the specific pieces of personal information that a business collects and to opt out of the sale of personal information. With regard to information sold to a third party about a consumer by a business, the CCPA prohibits the third party from selling that information unless the consumer has received notice, as specified, and an opportunity to exercise the right to opt out of the sale. Existing law commits the regulatory authority for these provisions with the Attorney General.This bill would require that a consumers election to opt out of the sale of personal information, as described above, remain effective after the company that holds the information, or the information itself, is sold. Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.
29		-
30		-	Existing law, the California Consumer Protection Act of 2018 (CCPA) grants a consumer various rights with regard to personal information relating to that consumer collected by a business, including the right to know the categories and the specific pieces of personal information that a business collects and to opt out of the sale of personal information. With regard to information sold to a third party about a consumer by a business, the CCPA prohibits the third party from selling that information unless the consumer has received notice, as specified, and an opportunity to exercise the right to opt out of the sale. Existing law commits the regulatory authority for these provisions with the Attorney General.
31		-
32		-	This bill would require that a consumers election to opt out of the sale of personal information, as described above, remain effective after the company that holds the information, or the information itself, is sold.
	28	+	Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.
33	29
34	30		Existing law, the California Financial Information Privacy Act, prohibits a financial institution from disclosing or sharing a consumers nonpublic personal information with a nonaffiliated third party unless the financial institution has obtained consent from the consumer, as specified. The bill makes a statement of legislative intent with regard to the act.
35	31
36		-
37		-
38	32		This bill would make nonsubstantive changes in the statement of intent regarding the California Financial Information Privacy Act.
39		-
40		-
41	33
42	34		## Digest Key
43	35
44	36		## Bill Text
45	37
46		-	The people of the State of California do enact as follows:SECTION 1. Section 1798.115 of the Civil Code is amended to read:1798.115. (a) A consumer shall have the right to request that a business that sells the consumers personal information, or that discloses it for a business purpose, disclose to that consumer:(1) The categories of personal information that the business collected about the consumer.(2) The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the sale of personal information about the consumer as described in paragraph (1) shall remain effective after the entity that holds the information, or the information itself, is sold.SECTION 1.Section 4051 of the Financial Code is amended to read:4051.(a)The Legislature intends for financial institutions to provide their consumers notice and meaningful choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b)It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
	38	+	The people of the State of California do enact as follows:SECTION 1. Section 4051 of the Financial Code is amended to read:4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
47	39
48	40		The people of the State of California do enact as follows:
49	41
50	42		## The people of the State of California do enact as follows:
51	43
52		-	SECTION 1. Section ~~1798.115~~ of the ~~Civil~~ Code is amended to read:~~1798.115~~. (a) ~~A consumer shall have~~ the ~~right~~ to ~~request that a business that sells the~~ consumers ~~personal information,~~ ~~or that discloses it for a business purpose, disclose to that consumer:(1) The categories of~~ personal information ~~that the business collected about the consumer.(2) The categories of personal information that the business~~ sold ~~about the consumer and the categories of third parties to whom the personal information was sold,~~ by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the ~~sale of personal~~ information ~~about~~ the ~~consumer as described in paragraph (1) shall remain effective after the entity~~ that ~~holds the information,~~ ~~or the information itself,~~ ~~is sold~~.
	44	+	SECTION 1. Section 4051 of the Financial Code is amended to read:4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
53	45
54		-	SECTION 1. Section ~~1798.115~~ of the ~~Civil~~ Code is amended to read:
	46	+	SECTION 1. Section 4051 of the Financial Code is amended to read:
55	47
56	48		### SECTION 1.
57	49
58		-	~~1798.115~~. (a) ~~A consumer shall have~~ the ~~right~~ to ~~request that a business that sells the~~ consumers ~~personal information,~~ ~~or that discloses it for a business purpose, disclose to that consumer:(1) The categories of~~ personal information ~~that the business collected about the consumer.(2) The categories of personal information that the business~~ sold ~~about the consumer and the categories of third parties to whom the personal information was sold,~~ by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the ~~sale of personal~~ information ~~about~~ the ~~consumer as described in paragraph (1) shall remain effective after the entity~~ that ~~holds the information,~~ ~~or the information itself,~~ ~~is sold~~.
	50	+	4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
59	51
60		-	~~1798.115~~. (a) ~~A consumer shall have~~ the ~~right~~ to ~~request that a business that sells the~~ consumers ~~personal information,~~ ~~or that discloses it for a business purpose, disclose to that consumer:(1) The categories of~~ personal information ~~that the business collected about the consumer.(2) The categories of personal information that the business~~ sold ~~about the consumer and the categories of third parties to whom the personal information was sold,~~ by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the ~~sale of personal~~ information ~~about~~ the ~~consumer as described in paragraph (1) shall remain effective after the entity~~ that ~~holds the information,~~ ~~or the information itself,~~ ~~is sold~~.
	52	+	4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
61	53
62		-	~~1798.115~~. (a) ~~A consumer shall have~~ the ~~right~~ to ~~request that a business that sells the~~ consumers ~~personal information,~~ ~~or that discloses it for a business purpose, disclose to that consumer:(1) The categories of~~ personal information ~~that the business collected about the consumer.(2) The categories of personal information that the business~~ sold ~~about the consumer and the categories of third parties to whom the personal information was sold,~~ by category or categories of personal information for each category of third parties to whom the personal information was sold.(3) The categories of personal information that the business disclosed about the consumer for a business purpose.(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.(2) A consumers election to opt out of the ~~sale of personal~~ information ~~about~~ the ~~consumer as described in paragraph (1) shall remain effective after the entity~~ that ~~holds the information,~~ ~~or the information itself,~~ ~~is sold~~.
	54	+	4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.
63	55
64	56
65	57
66		-	1798.115. (a) A consumer shall have the right to request that a business that sells the consumers personal information, or that discloses it for a business purpose, disclose to that consumer:
67		-
68		-	(1) The categories of personal information that the business collected about the consumer.
69		-
70		-	(2) The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.
71		-
72		-	(3) The categories of personal information that the business disclosed about the consumer for a business purpose.
73		-
74		-	(b) A business that sells personal information about a consumer, or that discloses a consumers personal information for a business purpose, shall disclose, pursuant to paragraph (4) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) to the consumer upon receipt of a verifiable consumer request from the consumer.
75		-
76		-	(c) A business that sells consumers personal information, or that discloses consumers personal information for a business purpose, shall disclose, pursuant to subparagraph (C) of paragraph (5) of subdivision (a) of Section 1798.130:
77		-
78		-	(1) The category or categories of consumers personal information it has sold, or if the business has not sold consumers personal information, it shall disclose that fact.
79		-
80		-	(2) The category or categories of consumers personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers personal information for a business purpose, it shall disclose that fact.
81		-
82		-	(d) (1) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out pursuant to Section 1798.120.
83		-
84		-	(2) A consumers election to opt out of the sale of personal information about the consumer as described in paragraph (1) shall remain effective after the entity that holds the information, or the information itself, is sold.
85		-
86		-
87		-
88		-
89		-
90		-	(a)The Legislature intends for financial institutions to provide their consumers notice and meaningful choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.
91		-
92		-
	58	+	4051. (a) The Legislature intends for financial institutions to provide their consumers notice and meaningful choice choices about how those consumers nonpublic personal information is shared or sold by their financial institutions.
93	59
94	60		(b) It is the intent of the Legislature in enacting the California Financial Information Privacy Act to afford persons greater privacy protections than those provided in Public Law 106-102, the federal Gramm-Leach-Bliley Act, and that this division be interpreted to be consistent with that purpose.