Last Updated: November 2023Click To View (PDF)

The California Consumer Privacy Act went into effect 1 January 2020, and enforcement by California's Office of the Attorney General began 1 July 2020. The California Privacy Rights Act ballot initiative passed in November 2020, with the majority of its provisions becoming operative 1 January 2023.

Bills in the California legislature impact organizations' data practices and understanding of the laws, whether through direct amendments to the CCPA and/or the CPRA or proposed legislation related to the collection or sharing of personal information, including platform liability. Notably, this tracker does not include every sectoral data privacy law, rather, it highlights any California data law with potential privacy implications across sectors.

The information in the tracker is from the California Legislative Information website and each bill is hyperlinked to the specific bill information. It also includes a brief summary of the legislation, as well as its status and last legislative action.

Notes:

  • The information in the tracker is from the California Legislative Information website and each bill is hyperlinked to the specific bill information.
  • 17 February 2023 was the last day for bills to be introduced.
  • 14 September 2023 was the last day for bills to be passed in each house.
  • 14 October 2023 was the last day for the governor to sign or veto bills passed by the legislature.
  • For more details on important dates, view the California Legislative Calendar and Deadlines.

We will continue to update this tracker as there is new activity and welcome the assistance of IAPP members. Please let us know at research@iapp.org if there are additional California privacy bills we should be following.



Approved
CDPO, CDPO/BR, CDPO/FR, CIPM, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPT, LGPD
Credits: 2

Submit for CPEs