CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 3172Introduced by Assembly Member LowenthalFebruary 16, 2024 An act to amend Section 1798.16 of the Civil Code, relating to privacy.LEGISLATIVE COUNSEL'S DIGESTAB 3172, as introduced, Lowenthal. Information Practices Act of 1977.The Information Practices Act of 1977 requires an agency, as defined, that collects personal information, as defined, to maintain the source or sources of the information, as specified.This bill would make nonsubstantive changes to that provision.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1798.16 of the Civil Code is amended to read:1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 3172Introduced by Assembly Member LowenthalFebruary 16, 2024 An act to amend Section 1798.16 of the Civil Code, relating to privacy.LEGISLATIVE COUNSEL'S DIGESTAB 3172, as introduced, Lowenthal. Information Practices Act of 1977.The Information Practices Act of 1977 requires an agency, as defined, that collects personal information, as defined, to maintain the source or sources of the information, as specified.This bill would make nonsubstantive changes to that provision.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 3172 Introduced by Assembly Member LowenthalFebruary 16, 2024 Introduced by Assembly Member Lowenthal February 16, 2024 An act to amend Section 1798.16 of the Civil Code, relating to privacy. LEGISLATIVE COUNSEL'S DIGEST ## LEGISLATIVE COUNSEL'S DIGEST AB 3172, as introduced, Lowenthal. Information Practices Act of 1977. The Information Practices Act of 1977 requires an agency, as defined, that collects personal information, as defined, to maintain the source or sources of the information, as specified.This bill would make nonsubstantive changes to that provision. The Information Practices Act of 1977 requires an agency, as defined, that collects personal information, as defined, to maintain the source or sources of the information, as specified. This bill would make nonsubstantive changes to that provision. ## Digest Key ## Bill Text The people of the State of California do enact as follows:SECTION 1. Section 1798.16 of the Civil Code is amended to read:1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. The people of the State of California do enact as follows: ## The people of the State of California do enact as follows: SECTION 1. Section 1798.16 of the Civil Code is amended to read:1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. SECTION 1. Section 1798.16 of the Civil Code is amended to read: ### SECTION 1. 1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. 1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. 1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named.(b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document.(c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter. 1798.16. (a) Whenever an agency collects personal information, the agency shall maintain the source or sources of the information, unless the source is the data subject or he or she has received a copy of the source document, including, but not limited to, the name of any source who is an individual acting in his or her the individuals own private or individual capacity. If the source is an agency, governmental entity entity, or other organization, such as a corporation or association, this requirement can may be met by maintaining the name of the agency, governmental entity, or organization, as long as the smallest reasonably identifiable unit of that agency, governmental entity, or organization is named. (b) On or after July 1, 2001, unless otherwise authorized by the Department of Information Technology pursuant to Executive Order D-3-99, whenever an agency electronically collects personal information, as defined by Section 11015.5 of the Government Code, the agency shall retain the source or sources or any intermediate form of the information, if either are created or possessed by the agency, unless the source is the data subject that has requested that the information be discarded or the data subject has received a copy of the source document. (c) The An agency shall maintain the source or sources of the information in a readily accessible form so as to be able to provide it to the data subject when they inspect any record pursuant to Section 1798.34. This section shall not apply if the source or sources are exempt from disclosure under the provisions of this chapter.