California Civil Code § 1798.99.82

(a) On or before January 31 following each year in which a business meets the definition of data broker as provided in this title, the business shall register with the California Privacy Protection Agency pursuant to the requirements of this section. (b) In registering with the California Privacy Protection Agency, as described in subdivision (a), a data broker shall do all of the following: (1) Pay a registration fee in an amount determined by the California Privacy Protection Agency, not to exceed the reasonable costs of establishing and maintaining the informational internet website described in Section 1798.99.84 and the reasonable costs of establishing, maintaining, and providing access to the accessible deletion mechanism described in Section 1798.99.86. Registration fees shall be deposited in the Data Brokers’ Registry Fund, created within the State Treasury pursuant to Section 1798.99.81, and used for the purposes outlined in this paragraph. (2) Provide the following information: (A) The name of the data broker and its primary physical, email, and internet website addresses. (B) The metrics compiled pursuant to paragraphs (1) and (2) of subdivision (a) of Section 1798.99.85. (C) Whether the data broker collects the personal information of minors. (D) Whether the data broker collects consumers’ names, dates of birth, ZIP Codes, email addresses, or phone numbers. (E) Whether the data broker collects consumers’ account login or account number in combination with any required security code, access code, or password that would permit access to a consumer’s account with a third party. (F) Whether the data broker collects consumers’ drivers’ license number, California identification card number, tax identification number, social security number, passport number, military identification number, or other unique identification number issued on a government document commonly used to verify the identity of a specific individual. (G) Whether the data broker collects consumers’ mobile advertising identification numbers, connected television identification numbers, or vehicle identification numbers (VIN). (H) Whether the data broker collects consumers’ citizenship data, including immigration status. (I) Whether the data broker collects consumers’ union membership status. (J) Whether the data broker collects consumers’ sexual orientation status. (K) Whether the data broker collects consumers’ gender identity and gender expression data. (L) Whether the data broker collects consumers’ biometric data. (M) Whether the data broker collects consumers’ precise geolocation. (N) Whether the data broker collects consumers’ reproductive health care data. (O) Whether the data broker has shared or sold consumers’ data to a foreign actor in the past year. (P) Whether the data broker has shared or sold consumers’ data to the federal government in the past year. (Q) Whether the data broker has shared or sold consumers’ data to other state governments in the past year. (R) Whether the data broker has shared or sold consumers’ data to law enforcement in the past year, unless that data was shared pursuant to a subpoena or court order. (S) Whether the data broker has shared or sold consumers’ data to a developer of a GenAI system or model in the past year. (T) Up to three, but no fewer than one, of the most common types of personal information that the data broker collects, if the data broker does not collect the information described in subparagraphs (D) and (G). (U) Beginning January 1, 2029, whether the data broker has undergone an audit as described in subdivision (e) of Section 1798.99.86, and, if so, the most recent year that the data broker has submitted a report resulting from the audit and any related materials to the California Privacy Protection Agency. (V) A link to a page on the data broker’s internet website that does both of the following: (i) Details how consumers may exercise their privacy rights b

‹ Prev All California sections Next ›

Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.