SACRAMENTO, Calif. (AP) — The governor of California signed a law Thursday that experts say gives consumers in the state the most far-reaching control over their personal data in the nation.
The law compels companies to tell customers upon request what personal data they’ve collected, why it was collected and what categories of third parties have received it.
Consumers will also be able to ask companies to delete their information and refrain from selling it.
It’s similar to data privacy regulation in the European Union, which aims to give consumers some control over the use of their data.
The California bill signed by Gov. Jerry Brown will apply only to California consumers. However, internet users in other states will likely see changes, said Cynthia Larose, a cybersecurity expert at the law firm Mintz Levin.
“It’s going to be impractical for companies to maintain two separate sets of privacy protections — one for California and one for everyone else,” she said.
The move by California came after large breaches in recent years at companies including Target and Equifax. Facebook also has faced intense scrutiny amid revelations that Republican-linked consulting firm Cambridge Analytica collected data from millions of Facebook users without their knowledge.
The bill gives companies the ability to offer discounts to customers who allow their data to be sold and charge those who opt out a reasonable amount based on how much the company makes selling the information.
Brown signed the measure just hours after lawmakers passed it with no dissenting votes in a last-minute scramble to convince San Francisco real estate developer Alastair Mactaggart to remove a similar initiative from consideration for the November ballot ahead of a Thursday deadline.
The bill, AB375 by Assemblyman Ed Chau, also bars companies from selling data from children younger than 16 without consent.
“We in California are taking a leadership position with this bill,” said Sen. Bob Hertzberg, a Van Nuys Democrat who co-authored the bill. “I think this will serve as an inspiration across the country.”
Voter-enacted initiatives are much harder to alter than laws passed through the legislative process.
Given the significance and complexity of the proposed policy, supporters and even many opponents said they wanted legislators to pass the bill so they can more easily change it in the future.
Lawmakers suggested the bill will need amendments.
Republican Assemblyman Jay Obernolte of Hesperia said he thinks the parts of the bill allowing people to sue companies over data breaches are too broad.
Although the bill is aimed at regulating internet and tech companies, some opponents say it could have unintended consequences on other industries.
A lobbyist for the newspaper industry, for example, said he worried the bill could harm news reporting by allowing subjects of negative investigative stories to prevent publication. Lawmakers said that’s not the bill’s intent.
Mactaggart spent $3 million to support the related initiative and qualify it for the ballot but plans to remove it now that the law has passed.
COMMENTS
Please let us know if you're having issues with commenting.