CaliforniaSB 3612025-2026 Regular SessionSenateWALLET

Data broker registration: data collection.

Sponsored By: Josh Becker (Democratic)

Signed by Governor

Your PRIA Score

Score Hidden

Personalized for You

How does this bill affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Bill Overview

Analyzed Economic Effects

3 provisions identified: 0 benefits, 1 costs, 2 mixed.

Audits and fines for data brokers

Beginning January 1, 2028, data brokers must complete an independent audit every three years to check compliance with the deletion rules, keep reports for at least six years, and provide them within five business days when the Agency asks. The Agency may charge brokers a reasonable access fee when they use the deletion tool. If a broker fails to register, the Agency can fine $200 per day, plus due fees and investigation costs. If a broker ignores deletion rules, the Agency can fine $200 per request per day, plus costs. Money from these fees and penalties goes into the Data Brokers’ Registry Fund to support oversight and court costs.

One-stop deletion of your data

By January 1, 2026, the California Privacy Protection Agency runs a free web tool that lets you send one verified request to delete your personal data held by all registered data brokers. You can exclude certain brokers and change a past request after at least 45 days. Starting August 1, 2026, brokers must check the tool at least every 45 days and finish deletions within 45 days, or treat unverified requests as opt-outs of sale or sharing. After deletion, brokers must keep deleting at least every 45 days and stop selling or sharing new data about you, unless you ask otherwise or the law allows keeping data for limited purposes. The tool supports multiple languages, accessibility features, authorized agents, and shows request status.

Data brokers must register and disclose

Data brokers must register with the Agency each year by January 31 and pay a fee that covers the public site and the deletion tool. Registration must list contact details, the kinds of personal data collected (including sensitive types or minors’ data), and whether data was shared or sold in the past year to foreign actors, governments, law enforcement, or AI developers. The Agency posts a public registry page with this information and a link to each broker’s privacy-rights page, but it withholds certain sensitive registration fields from public view. Starting January 1, 2029, registrations must also say whether the broker completed the required audit and the most recent year submitted.

Sponsors & Cosponsors

Sponsor

  • Josh Becker

    Democratic • Senate

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

All Roll Calls

Yes: 199 • No: 0

Senate vote 9/11/2025

Item 61 — Senate SFLOOR

Yes: 40 • No: 0

House vote 9/10/2025

Item 28 — Assembly AFLOOR

Yes: 79 • No: 0

legislature vote 7/9/2025

Vote in CX25

Yes: 15 • No: 0

legislature vote 6/24/2025

Vote in CX32

Yes: 15 • No: 0

Senate vote 4/24/2025

Item 103 — Senate SFLOOR

Yes: 37 • No: 0

legislature vote 4/1/2025

Vote in CS53

Yes: 13 • No: 0

Actions Timeline

  1. Chaptered by Secretary of State. Chapter 466, Statutes of 2025.

    10/8/2025Senate
  2. Approved by the Governor.

    10/8/2025legislature
  3. Enrolled and presented to the Governor at 11 a.m.

    9/22/2025legislature
  4. Assembly amendments concurred in. (Ayes 40. Noes 0. Page 2892.) Ordered to engrossing and enrolling.

    9/11/2025Senate
  5. In Senate. Concurrence in Assembly amendments pending.

    9/10/2025Senate
  6. Read third time. Passed. (Ayes 79. Noes 0. Page 3168.) Ordered to the Senate.

    9/10/2025House
  7. Ordered to third reading.

    8/26/2025House
  8. Read third time and amended.

    8/26/2025House
  9. Ordered to third reading.

    7/14/2025House
  10. From consent calendar on motion of Assembly Member Aguiar-Curry.

    7/14/2025House
  11. Read second time. Ordered to consent calendar.

    7/10/2025House
  12. From committee: Do pass. Ordered to consent calendar. (Ayes 15. Noes 0.) (July 9).

    7/9/2025House
  13. Read second time and amended. Re-referred to Com. on APPR.

    6/26/2025House
  14. From committee: Do pass as amended and re-refer to Com. on APPR. with recommendation: To consent calendar. (Ayes 15. Noes 0.) (June 24).

    6/25/2025House
  15. Referred to Com. on P. & C.P.

    5/12/2025House
  16. In Assembly. Read first time. Held at Desk.

    4/24/2025House
  17. Read third time. Passed. (Ayes 37. Noes 0. Page 887.) Ordered to the Assembly.

    4/24/2025Senate
  18. Read second time. Ordered to consent calendar.

    4/22/2025Senate
  19. From committee: Be ordered to second reading pursuant to Senate Rule 28.8 and ordered to consent calendar.

    4/21/2025Senate
  20. Set for hearing April 21.

    4/4/2025Senate
  21. From committee: Do pass and re-refer to Com. on APPR. with recommendation: To consent calendar. (Ayes 13. Noes 0. Page 610.) (April 1). Re-referred to Com. on APPR.

    4/2/2025Senate
  22. From committee with author's amendments. Read second time and amended. Re-referred to Com. on JUD.

    3/24/2025Senate
  23. Set for hearing April 1.

    3/18/2025Senate
  24. Referred to Com. on JUD.

    2/26/2025Senate
  25. From printer. May be acted upon on or after March 16.

    2/14/2025Senate

Bill Text

  • Chaptered

    10/8/2025

  • Enrolled

    9/13/2025

  • Amended Assembly

    8/26/2025

  • Amended Assembly

    6/26/2025

  • Amended Senate

    3/24/2025

  • Introduced

    2/13/2025

Related Bills

Back to State Legislation