Governor signs bills bolstering data privacy protection

Gov. Gavin Newsom has signed into law several bills related to consumer data privacy that augment the sweeping California Consumer Privacy Act when it takes effect Jan. 1.

AB 1130 expands what type of personal information is included in the context of data breaches, such as biometric data and government-issued identification numbers. Businesses are also required to maintain security measures and notify customers when their data has been breached.

Exemptions to how businesses should handle personal information under the new law were also approved by Newsom before the deadline on Oct. 13.

"With the passage of AB 1130, California has once again proven it deserves its reputation as the nation's leader in data privacy and protection," Attorney General Xavier Becerra said in a statement commenting on Newsom's signing on Friday.

Another bill, AB 25, gives employers a one-year exemption from the new law. The exemption includes the collection of personal information from job applicants, employees or contractors.

A similar exemption is given to vehicle repair shops under AB 1146. Under the bill, the right of deletion doesn't apply to vehicle repair information, such as warranties and other recall-related information.

The Consumer Privacy Act states a business has to provide at least two methods for customers to make requests regarding information that is collected about them. AB 1564 clarifies that businesses operating solely online only have to provide an email address for such requests.

Other changes include a clarification of the meaning of "publicly available information" and a broader definition of stalking, meaning that drones, or other future technology, can not be used to stalk, harass, monitor or keep someone under surveillance.

The Legislature closed its 2019 session on Sept. 13.

-- Henrik Nilsson