| Old | New | Differences | |
|---|---|---|---|
| 1 | - | Amended IN | |
| 1 | + | Amended IN Assembly May 24, 2021 Amended IN Assembly April 21, 2021 CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION Assembly Bill No. 814Introduced by Assembly Member LevineFebruary 16, 2021An act to add Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information.LEGISLATIVE COUNSEL'S DIGESTAB 814, as amended, Levine. Personal information: contact tracing.Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumers personal information.This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would prohibit an officer, deputy, employee, or agent of a law enforcement agency, as defined, from engaging in conducting contact tracing. tracing, except the bill would authorize an employee of a law enforcement agency to conduct contract tracing of employees of the same law enforcement agency. The bill would require all data collected, received, or prepared for purposes of contact tracing to be deleted within 60 days, except if that data is in the possession of a state or local health department. as prescribed. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect. The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation.1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees.SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 2 | 2 | ||
| 3 | - | ||
| 3 | + | Amended IN Assembly May 24, 2021 Amended IN Assembly April 21, 2021 CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION Assembly Bill No. 814Introduced by Assembly Member LevineFebruary 16, 2021An act to add Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information.LEGISLATIVE COUNSEL'S DIGESTAB 814, as amended, Levine. Personal information: contact tracing.Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumers personal information.This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would prohibit an officer, deputy, employee, or agent of a law enforcement agency, as defined, from engaging in conducting contact tracing. tracing, except the bill would authorize an employee of a law enforcement agency to conduct contract tracing of employees of the same law enforcement agency. The bill would require all data collected, received, or prepared for purposes of contact tracing to be deleted within 60 days, except if that data is in the possession of a state or local health department. as prescribed. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect. The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO | |
| 4 | 4 | ||
| 5 | - | ||
| 5 | + | Amended IN Assembly May 24, 2021 Amended IN Assembly April 21, 2021 | |
| 6 | 6 | ||
| 7 | - | Amended IN Senate July 08, 2021 | |
| 8 | 7 | Amended IN Assembly May 24, 2021 | |
| 9 | 8 | Amended IN Assembly April 21, 2021 | |
| 10 | 9 | ||
| 11 | 10 | CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION | |
| 12 | 11 | ||
| 13 | 12 | Assembly Bill | |
| 14 | 13 | ||
| 15 | 14 | No. 814 | |
| 16 | 15 | ||
| 17 | 16 | Introduced by Assembly Member LevineFebruary 16, 2021 | |
| 18 | 17 | ||
| 19 | 18 | Introduced by Assembly Member Levine | |
| 20 | 19 | February 16, 2021 | |
| 21 | 20 | ||
| 22 | - | An act to add Title 1.81.10 | |
| 21 | + | An act to add Title 1.81.10 (commencing with Section 1798.600) to Part 4 of Division 3 of the Civil Code, relating to personal information. | |
| 23 | 22 | ||
| 24 | 23 | LEGISLATIVE COUNSEL'S DIGEST | |
| 25 | 24 | ||
| 26 | 25 | ## LEGISLATIVE COUNSEL'S DIGEST | |
| 27 | 26 | ||
| 28 | 27 | AB 814, as amended, Levine. Personal information: contact tracing. | |
| 29 | 28 | ||
| 30 | - | Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumers personal information.This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would | |
| 29 | + | Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information.Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumers personal information.This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would prohibit an officer, deputy, employee, or agent of a law enforcement agency, as defined, from engaging in conducting contact tracing. tracing, except the bill would authorize an employee of a law enforcement agency to conduct contract tracing of employees of the same law enforcement agency. The bill would require all data collected, received, or prepared for purposes of contact tracing to be deleted within 60 days, except if that data is in the possession of a state or local health department. as prescribed. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest.This bill would make legislative findings to that effect. The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.This bill would make legislative findings to that effect. | |
| 31 | 30 | ||
| 32 | 31 | Existing law, the Information Practices Act of 1977, prescribes a set of requirements, prohibitions, and remedies applicable to public agencies, as defined, with regard to their collection, storage, and disclosure of personal information. | |
| 33 | 32 | ||
| 34 | 33 | Existing law, the California Consumer Privacy Act of 2018 (CCPA), grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that sells personal information about the consumer to third parties not to sell the consumers personal information. | |
| 35 | 34 | ||
| 36 | - | This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would | |
| 35 | + | This bill would, except as prescribed, prohibit data collected, received, or prepared for purposes of contact tracing from being used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. The bill would prohibit an officer, deputy, employee, or agent of a law enforcement agency, as defined, from engaging in conducting contact tracing. tracing, except the bill would authorize an employee of a law enforcement agency to conduct contract tracing of employees of the same law enforcement agency. The bill would require all data collected, received, or prepared for purposes of contact tracing to be deleted within 60 days, except if that data is in the possession of a state or local health department. as prescribed. | |
| 37 | 36 | ||
| 38 | 37 | Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. | |
| 39 | 38 | ||
| 40 | 39 | This bill would make legislative findings to that effect. | |
| 41 | 40 | ||
| 42 | 41 | The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose. | |
| 43 | 42 | ||
| 44 | 43 | This bill would make legislative findings to that effect. | |
| 45 | 44 | ||
| 46 | 45 | ## Digest Key | |
| 47 | 46 | ||
| 48 | 47 | ## Bill Text | |
| 49 | 48 | ||
| 50 | - | The people of the State of California do enact as follows:SECTION 1.Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read: | |
| 49 | + | The people of the State of California do enact as follows:SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation.1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees.SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes.SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 51 | 50 | ||
| 52 | 51 | The people of the State of California do enact as follows: | |
| 53 | 52 | ||
| 54 | 53 | ## The people of the State of California do enact as follows: | |
| 55 | 54 | ||
| 55 | + | SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read:TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation.1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 56 | 56 | ||
| 57 | - | ||
| 58 | - | SECTION 1. Title 1.81.9 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, immediately following Section 1798.202, to read:TITLE 1.81.9. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.(10) The Department of Corrections and Rehabilitation.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) A state or local health department may disclose, to the University of California or a nonprofit educational institution conducting scientific research, data collected, received, or prepared for purposes of contact tracing only if both the following are true: (1) The request for information is approved by the Committee for the Protection of Human Subjects for the California Health and Human Services Agency or an institutional review board.(2) The requirements described in subdivision (t) of Section 1798.24 are met.(c)(d) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d)This section(e) Subdivisions (a) and (b) shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or local, state, or federal workplace health and safety law or regulation.1798.602. (a) Except as provided in subdivision (b), a correctional officer or an officer, deputy, employee, or agent of a law enforcement agency shall not conduct contact tracing.(b) (1) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.(2) A health care worker who is not a correctional officer may conduct contact tracing in a jail or prison.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 59 | - | ||
| 60 | - | SECTION 1. Title 1.81.9 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, immediately following Section 1798.202, to read: | |
| 57 | + | SECTION 1. Title 1.81.10 (commencing with Section 1798.600) is added to Part 4 of Division 3 of the Civil Code, to read: | |
| 61 | 58 | ||
| 62 | 59 | ### SECTION 1. | |
| 63 | 60 | ||
| 64 | - | TITLE 1.81. | |
| 61 | + | TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation.1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 65 | 62 | ||
| 66 | - | TITLE 1.81. | |
| 63 | + | TITLE 1.81.10. Contact Tracing1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice.1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation.1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 67 | 64 | ||
| 68 | - | TITLE 1.81. | |
| 65 | + | TITLE 1.81.10. Contact Tracing | |
| 69 | 66 | ||
| 70 | - | TITLE 1.81. | |
| 67 | + | TITLE 1.81.10. Contact Tracing | |
| 71 | 68 | ||
| 72 | - | 1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice. | |
| 69 | + | 1798.600. As used in this title:(a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease.(b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person.(c) Law enforcement agency means any of the following:(1) A police department.(2) A sheriffs department.(3) A district attorney.(4) A county probation department.(5) A transit agency police department.(6) A school district police department.(7) The police department of any campus of any of the following:(A) The University of California.(B) The California State University.(C) A community college.(8) The Department of the California Highway Patrol.(9) The Department of Justice. | |
| 73 | 70 | ||
| 74 | 71 | ||
| 75 | 72 | ||
| 76 | 73 | 1798.600. As used in this title: | |
| 77 | 74 | ||
| 78 | 75 | (a) Contact tracing means identifying and monitoring individuals, through data collection and analysis, who may have had contact with an infectious person as a means of controlling the spread of a communicable disease. | |
| 79 | 76 | ||
| 80 | 77 | (b) Data means measurements, transactions, determinations, locations, or other information, whether or not that information can be associated with a specific natural person. | |
| 81 | 78 | ||
| 82 | 79 | (c) Law enforcement agency means any of the following: | |
| 83 | 80 | ||
| 84 | 81 | (1) A police department. | |
| 85 | 82 | ||
| 86 | 83 | (2) A sheriffs department. | |
| 87 | 84 | ||
| 88 | 85 | (3) A district attorney. | |
| 89 | 86 | ||
| 90 | 87 | (4) A county probation department. | |
| 91 | 88 | ||
| 92 | 89 | (5) A transit agency police department. | |
| 93 | 90 | ||
| 94 | 91 | (6) A school district police department. | |
| 95 | 92 | ||
| 96 | 93 | (7) The police department of any campus of any of the following: | |
| 97 | 94 | ||
| 98 | 95 | (A) The University of California. | |
| 99 | 96 | ||
| 100 | 97 | (B) The California State University. | |
| 101 | 98 | ||
| 102 | 99 | (C) A community college. | |
| 103 | 100 | ||
| 104 | 101 | (8) The Department of the California Highway Patrol. | |
| 105 | 102 | ||
| 106 | 103 | (9) The Department of Justice. | |
| 107 | 104 | ||
| 108 | - | (10) The Department of Corrections and Rehabilitation. | |
| 109 | - | ||
| 110 | - | 1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) A state or local health department may disclose, to the University of California or a nonprofit educational institution conducting scientific research, data collected, received, or prepared for purposes of contact tracing only if both the following are true: (1) The request for information is approved by the Committee for the Protection of Human Subjects for the California Health and Human Services Agency or an institutional review board.(2) The requirements described in subdivision (t) of Section 1798.24 are met.(c)(d) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d)This section(e) Subdivisions (a) and (b) shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or local, state, or federal workplace health and safety law or regulation. | |
| 105 | + | 1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts.(b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days.(2) This subdivision shall not apply to data in the possession of a local or state health department.(c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996.(d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation. | |
| 111 | 106 | ||
| 112 | 107 | ||
| 113 | 108 | ||
| 114 | 109 | 1798.601. (a) Data collected, received, or prepared for purposes of contact tracing shall not be used, maintained, or disclosed for any purpose other than facilitating contact tracing efforts. | |
| 115 | 110 | ||
| 116 | 111 | (b) (1) Except as provided in paragraph (2), all data collected, received, or prepared for purposes of contact tracing shall be deleted within 60 days. | |
| 117 | 112 | ||
| 118 | 113 | (2) This subdivision shall not apply to data in the possession of a local or state health department. | |
| 119 | 114 | ||
| 120 | - | (c) A | |
| 115 | + | (c) This section shall not apply to a provider of health care, as defined in Section 56.05, or to a providers business associate, as defined in Section 160.103 of Title 45 of the Code of Federal Regulations, to the extent the provider or business associate maintains the data collected, received, or prepared for purposes of contact tracing in the same manner as medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or protected health information governed by the Health Insurance Portability and Accountability Act of 1996. | |
| 121 | 116 | ||
| 122 | - | ||
| 117 | + | (d) This section shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or federal workplace health and safety law or regulation. | |
| 123 | 118 | ||
| 124 | - | (2) The requirements described in subdivision (t) of Section 1798.24 are met. | |
| 125 | - | ||
| 126 | - | (c) | |
| 119 | + | 1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing.(b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency. | |
| 127 | 120 | ||
| 128 | 121 | ||
| 129 | 122 | ||
| 130 | - | ( | |
| 123 | + | 1798.602. An (a) Except as provided in subdivision (b), an officer, deputy, employee, or agent of a law enforcement agency shall not engage in conduct contact tracing. | |
| 131 | 124 | ||
| 132 | - | (d)This section | |
| 133 | - | ||
| 134 | - | ||
| 135 | - | ||
| 136 | - | (e) Subdivisions (a) and (b) shall not apply to data used, maintained, or disclosed by an employer to the extent the use, maintenance, or disclosure of that data is necessary to comply with a state or local, state, or federal workplace health and safety law or regulation. | |
| 137 | - | ||
| 138 | - | 1798.602. (a) Except as provided in subdivision (b), a correctional officer or an officer, deputy, employee, or agent of a law enforcement agency shall not conduct contact tracing.(b) (1) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency.(2) A health care worker who is not a correctional officer may conduct contact tracing in a jail or prison. | |
| 139 | - | ||
| 140 | - | ||
| 141 | - | ||
| 142 | - | 1798.602. (a) Except as provided in subdivision (b), a correctional officer or an officer, deputy, employee, or agent of a law enforcement agency shall not conduct contact tracing. | |
| 143 | - | ||
| 144 | - | (b) (1) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency. | |
| 145 | - | ||
| 146 | - | (2) A health care worker who is not a correctional officer may conduct contact tracing in a jail or prison. | |
| 125 | + | (b) An employee of a law enforcement agency may conduct contact tracing of employees of the same law enforcement agency. | |
| 147 | 126 | ||
| 148 | 127 | 1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief.(b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 149 | 128 | ||
| 150 | 129 | ||
| 151 | 130 | ||
| 152 | 131 | 1798.603. (a) A person may bring a civil action for a violation of this title to obtain injunctive relief. | |
| 153 | 132 | ||
| 154 | 133 | (b) A prevailing plaintiff in a civil action brought pursuant to this section shall be awarded reasonable attorney fees. | |
| 155 | 134 | ||
| 156 | 135 | SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 157 | 136 | ||
| 158 | 137 | SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 159 | 138 | ||
| 160 | 139 | SEC. 2. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, imposes a limitation on the publics right of access to the meetings of public bodies or the writings of public officials and agencies within the meaning of Section 3 of Article I of the California Constitution. Pursuant to that constitutional provision, the Legislature makes the following findings to demonstrate the interest protected by this limitation and the need for protecting that interest: | |
| 161 | 140 | ||
| 162 | 141 | ### SEC. 2. | |
| 163 | 142 | ||
| 164 | 143 | This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 165 | 144 | ||
| 166 | 145 | SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 167 | 146 | ||
| 168 | 147 | SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. | |
| 169 | 148 | ||
| 170 | 149 | SEC. 3. The Legislature finds and declares that Section 1 of this act, which adds Section 1798.601 to the Civil Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings: | |
| 171 | 150 | ||
| 172 | 151 | ### SEC. 3. | |
| 173 | 152 | ||
| 174 | 153 | This act balances the right of the public to access relevant information about contact tracing efforts by public health entities while protecting the privacy rights of individuals whose data is collected for contact tracing purposes. |