| 1 | | - | Assembly Bill No. 1824 CHAPTER 940An act to amend Section 1798.120 of the Civil Code, relating to privacy. [ Approved by Governor September 29, 2024. Filed with Secretary of State September 29, 2024. ] LEGISLATIVE COUNSEL'S DIGESTAB 1824, Valencia. California Consumer Privacy Act of 2018: opt out right: mergers.The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA.This bill would require a business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all or part of the transferor to comply with a consumers opt out direction to the transferor.This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.This bill would incorporate additional changes to Section 1798.120 of the Civil Code proposed by AB 1949 to be operative only if this bill and AB 1949 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 1.5. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 1 | + | Enrolled August 31, 2024 Passed IN Senate August 27, 2024 Passed IN Assembly August 28, 2024 Amended IN Senate August 22, 2024 Amended IN Assembly March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1824Introduced by Assembly Member ValenciaJanuary 11, 2024An act to amend Section 1798.120 of the Civil Code, relating to privacy.LEGISLATIVE COUNSEL'S DIGESTAB 1824, Valencia. California Consumer Privacy Act of 2018: opt out right: mergers.The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA.This bill would require a business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all or part of the transferor to comply with a consumers opt out direction to the transferor.This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.This bill would incorporate additional changes to Section 1798.120 of the Civil Code proposed by AB 1949 to be operative only if this bill and AB 1949 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 1.5. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 14 | 25 | | |
|---|
| 15 | 26 | | LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 16 | 27 | | |
|---|
| 17 | 28 | | ## LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 18 | 29 | | |
|---|
| 19 | 30 | | AB 1824, Valencia. California Consumer Privacy Act of 2018: opt out right: mergers. |
|---|
| 20 | 31 | | |
|---|
| 21 | 32 | | The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA.This bill would require a business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all or part of the transferor to comply with a consumers opt out direction to the transferor.This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.This bill would incorporate additional changes to Section 1798.120 of the Civil Code proposed by AB 1949 to be operative only if this bill and AB 1949 are enacted and this bill is enacted last. |
|---|
| 22 | 33 | | |
|---|
| 23 | 34 | | The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. |
|---|
| 24 | 35 | | |
|---|
| 25 | 36 | | This bill would require a business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all or part of the transferor to comply with a consumers opt out direction to the transferor. |
|---|
| 26 | 37 | | |
|---|
| 27 | 38 | | This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020. |
|---|
| 28 | 39 | | |
|---|
| 29 | 40 | | This bill would incorporate additional changes to Section 1798.120 of the Civil Code proposed by AB 1949 to be operative only if this bill and AB 1949 are enacted and this bill is enacted last. |
|---|
| 30 | 41 | | |
|---|
| 31 | 42 | | ## Digest Key |
|---|
| 32 | 43 | | |
|---|
| 33 | 44 | | ## Bill Text |
|---|
| 34 | 45 | | |
|---|
| 35 | 46 | | The people of the State of California do enact as follows:SECTION 1. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 1.5. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information.SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020.SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 36 | 47 | | |
|---|
| 37 | 48 | | The people of the State of California do enact as follows: |
|---|
| 38 | 49 | | |
|---|
| 39 | 50 | | ## The people of the State of California do enact as follows: |
|---|
| 40 | 51 | | |
|---|
| 41 | 52 | | SECTION 1. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 42 | 53 | | |
|---|
| 43 | 54 | | SECTION 1. Section 1798.120 of the Civil Code is amended to read: |
|---|
| 44 | 55 | | |
|---|
| 45 | 56 | | ### SECTION 1. |
|---|
| 46 | 57 | | |
|---|
| 47 | 58 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 48 | 59 | | |
|---|
| 49 | 60 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 50 | 61 | | |
|---|
| 51 | 62 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 52 | 63 | | |
|---|
| 53 | 64 | | |
|---|
| 54 | 65 | | |
|---|
| 55 | 66 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information |
|---|
| 56 | 67 | | |
|---|
| 57 | 68 | | (a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing. |
|---|
| 58 | 69 | | |
|---|
| 59 | 70 | | (2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision. |
|---|
| 60 | 71 | | |
|---|
| 61 | 72 | | (b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information. |
|---|
| 62 | 73 | | |
|---|
| 63 | 74 | | (c) Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age. |
|---|
| 64 | 75 | | |
|---|
| 65 | 76 | | (d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 66 | 77 | | |
|---|
| 67 | 78 | | SEC. 1.5. Section 1798.120 of the Civil Code is amended to read:1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 68 | 79 | | |
|---|
| 69 | 80 | | SEC. 1.5. Section 1798.120 of the Civil Code is amended to read: |
|---|
| 70 | 81 | | |
|---|
| 71 | 82 | | ### SEC. 1.5. |
|---|
| 72 | 83 | | |
|---|
| 73 | 84 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 74 | 85 | | |
|---|
| 75 | 86 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 76 | 87 | | |
|---|
| 77 | 88 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information(a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing.(2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision.(b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information.(c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age.(d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 78 | 89 | | |
|---|
| 79 | 90 | | |
|---|
| 80 | 91 | | |
|---|
| 81 | 92 | | 1798.120. Consumers Right to Opt Out of Sale or Sharing of Personal Information |
|---|
| 82 | 93 | | |
|---|
| 83 | 94 | | (a) (1) A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information. This right may be referred to as the right to opt out of sale or sharing. |
|---|
| 84 | 95 | | |
|---|
| 85 | 96 | | (2) A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the transferee assumes control of all of, or part of, the transferor shall comply with a consumers direction to the transferor made pursuant to this subdivision. |
|---|
| 86 | 97 | | |
|---|
| 87 | 98 | | (b) A business that sells consumers personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the right to opt out of the sale or sharing of their personal information. |
|---|
| 88 | 99 | | |
|---|
| 89 | 100 | | (c) (1) Notwithstanding subdivision (a), a business shall not sell or share the personal information of a consumer if the business has actual knowledge that the consumer is less than 18 years of age, unless the consumer, in the case of a consumer at least 13 years of age and less than 18 years of age, or the consumers parent or guardian, in the case of a consumer less than 13 years of age, has affirmatively authorized the sale or sharing of the consumers personal information. |
|---|
| 90 | 101 | | |
|---|
| 91 | 102 | | (2) A business that willfully disregards the consumers age shall be deemed to have had actual knowledge of the consumers age. |
|---|
| 92 | 103 | | |
|---|
| 93 | 104 | | (d) A business that has received direction from a consumer not to sell or share the consumers personal information or, in the case of a minor consumers personal information has not received consent to sell or share the minor consumers personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumers personal information after its receipt of the consumers direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumers personal information. |
|---|
| 94 | 105 | | |
|---|
| 95 | 106 | | SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020. |
|---|
| 96 | 107 | | |
|---|
| 97 | 108 | | SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020. |
|---|
| 98 | 109 | | |
|---|
| 99 | 110 | | SEC. 2. The Legislature finds and declares that this act furthers the purposes and intent of the California Privacy Rights Act of 2020. |
|---|
| 100 | 111 | | |
|---|
| 101 | 112 | | ### SEC. 2. |
|---|
| 102 | 113 | | |
|---|
| 103 | 114 | | SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 104 | 115 | | |
|---|
| 105 | 116 | | SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 106 | 117 | | |
|---|
| 107 | 118 | | SEC. 3. Section 1.5 of this bill incorporates amendments to Section 1798.120 of the Civil Code proposed by both this bill and Assembly Bill 1949. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2025, (2) each bill amends Section 1798.120 of the Civil Code, and (3) this bill is enacted after Assembly Bill 1949, in which case Section 1 of this bill shall not become operative. |
|---|
| 108 | 119 | | |
|---|
| 109 | 120 | | ### SEC. 3. |
|---|