CA AB 364
deadPersonal information: maintenance.
California · 2025-2026 Regular Session · lower
Quick answers
Did CA AB 364 pass?
No. CA AB 364 did not pass — it was defeated or died in the legislative process (2026-02-02). Latest recorded action (2026-02-02): From committee: Filed with the Chief Clerk pursuant to Joint Rule 56.
What is CA AB 364 about?
The California Consumer Privacy Act of 2018 (CCPA) grants to a consumer various rights with respect to personal information, as defined, that is collected by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information, as specified. The CCPA requires a business that controls the collection of a consumer's personal information to, at or before the point of collection, inform a consumer of, among other things, the categories of personal information to be collected, the purposes for which the categories of personal information are collected or used, and whether that information is sold or shared. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. This bill would enact the Stop Foreign Governments from Accessing Californians' Sensitive Personal Information Act which would additionally require a business to disclose to a consumer if the business intends to maintain the consumer's personal information outside of the United States. The bill would prohibit a business from maintaining a consumer's personal information outside of the United States unless, among other things, the consumer explicitly consented to the business maintaining the consumer's personal information outside of the United States. The bill would also prohibit a business from maintaining personal information that is health care information, financial information, or geolocation data in the custody of a foreign government or a third party that is owned or controlled by a foreign government. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Who sponsors CA AB 364?
DeMaio is the primary sponsor of CA AB 364.
Description
The California Consumer Privacy Act of 2018 (CCPA) grants to a consumer various rights with respect to personal information, as defined, that is collected by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information, as specified. The CCPA requires a business that controls the collection of a consumer's personal information to, at or before the point of collection, inform a consumer of, among other things, the categories of personal information to be collected, the purposes for which the categories of personal information are collected or used, and whether that information is sold or shared. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. This bill would enact the Stop Foreign Governments from Accessing Californians' Sensitive Personal Information Act which would additionally require a business to disclose to a consumer if the business intends to maintain the consumer's personal information outside of the United States. The bill would prohibit a business from maintaining a consumer's personal information outside of the United States unless, among other things, the consumer explicitly consented to the business maintaining the consumer's personal information outside of the United States. The bill would also prohibit a business from maintaining personal information that is health care information, financial information, or geolocation data in the custody of a foreign government or a third party that is owned or controlled by a foreign government. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
- Introduced
- 2025-03-13
- Latest action
- 2026-02-02 — From committee: Filed with the Chief Clerk pursuant to Joint Rule 56.
- Bill type
- bill
- Last updated
- —
Subjects
Sponsors
- DeMaioauthor
Committees
Not provided by source.
Action timeline
2025-02-03
Read first time. To print.
reading-1
2025-02-04
From printer. May be heard in committee March 6.
2025-03-13
Referred to Com. on P. & C.P.
referral-committee
2025-03-13
From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended.
amendment-introduction,amendment-passage,committee-passage,reading-1,reading-2,referral-committee
2025-03-17
Re-referred to Com. on P. & C.P.
referral-committee
2025-03-24
From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended.
amendment-introduction,amendment-passage,committee-passage,reading-1,reading-2,referral-committee
2025-03-25
Re-referred to Com. on P. & C.P.
referral-committee
2025-03-25
In committee: Hearing postponed by committee.
2026-01-31
Died pursuant to Art. IV, Sec. 10(c) of the Constitution.
failure
2026-02-02
From committee: Filed with the Chief Clerk pursuant to Joint Rule 56.
committee-passage,failure
Versions
Documents
Votes
Not provided by source.
Related bills
No related bills recorded for this bill.
Official source
Attribution
Data from openstates_bulk_csv, retrieved 2026-07-24T01:34:27.960412Z
Inspect retained evidence for changes recorded after evidence tracking began:
Use this data
Every field on this page is available from the free public API — no key or licence required. Fetch this bill as JSON: GET /api/v1/bills?jurisdiction=CA&identifier=AB 364. See the API docs or the MCP server for AI assistants.
Known limitations
- Sponsor party and chamber affiliation are not yet captured by this API.
- Committee referrals are not yet captured.
See the methodology page for data sources and limitations.