CA SB 361
enactedData brokers: data collection and deletion.
California · 2025-2026 Regular Session · upper
Quick answers
Did CA SB 361 pass?
Yes. CA SB 361 has been enacted into law as of 2025-10-08. Latest recorded action (2025-10-08): Chaptered by Secretary of State. Chapter 466, Statutes of 2025.
What is CA SB 361 about?
The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, including the right to request that a business disclose specified information that has been collected about the consumer, to request that a business delete personal information about the consumer that the business has collected from the consumer, and to direct a business not to sell or share the consumer's personal information, as specified. The CCPA defines various terms for these purposes. The California Privacy Rights Act of 2020 (CPRA) , approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires a data broker to register with the agency, and defines "data broker" to mean a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, subject to specified exceptions. Existing law requires a data broker, in registering with the agency, to pay a registration fee in an amount determined by the agency and provide specified information, including, among other things, the name of the data broker and its primary physical, email, and internet website addresses, and whether the data broker collects the personal information of minors, consumers' precise geolocation, or consumers' reproductive health care data. This bill would require a data broker to provide additional information to the agency, including whether the data broker collects consumers' names, dates of birth, ZIP Codes, email addresses, phone numbers, login or account information, various government identification numbers, mobile advertising, connected television, or vehicle identification numbers, citizenship data, union membership status, sexual orientation status, gender identity and gender expression data, biometric data, and up to 3, but no fewer than one, of the most common types of personal information that the data broker collects, as provided. The bill would also require a data broker to provide information regarding whether, in the past year, the data broker shared or sold consumers' data to a foreign actor, as defined, the federal government, other state governments, law enforcement, as provided, or a developer of a GenAI system, as defined. The bill would make changes to the administrative fines and costs that apply to data brokers who fail to register. Existing law requires, beginning January 1, 2026, the California Privacy Protection Agency to establish an accessible deletion mechanism that, among other things, allows a consumer, through a single verifiable consumer request, to request that every data broker that maintains any personal information delete any personal information related to that consumer held by the data broker or associated service provider or contractor. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, among other things, process a denied request to delete personal information as an opt-out of the sale or sharing of the consumer's personal information under the CCPA, as specified. This bill would require a data broker to process the above-described denied request within 45 days of receiving the request. Existing law requires the agency to create a page on its internet website where registration information provided by data brokers and the accessible deletion mechanism is accessible to the public. This bill would prohibit the agency from making accessible to the public on its internet website information regarding whether the data broker collects consumers' names, dates of birth, zip codes, email addresses, phone numbers, mobile advertising, connected television, or vehicle identification numbers, and the most common types of personal information that it collects. This bill would declare that it furthers the purposes and intent of the CPRA for specified reasons.
Who sponsors CA SB 361?
Becker is the primary sponsor of CA SB 361.
Description
The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, including the right to request that a business disclose specified information that has been collected about the consumer, to request that a business delete personal information about the consumer that the business has collected from the consumer, and to direct a business not to sell or share the consumer's personal information, as specified. The CCPA defines various terms for these purposes. The California Privacy Rights Act of 2020 (CPRA) , approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires a data broker to register with the agency, and defines "data broker" to mean a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, subject to specified exceptions. Existing law requires a data broker, in registering with the agency, to pay a registration fee in an amount determined by the agency and provide specified information, including, among other things, the name of the data broker and its primary physical, email, and internet website addresses, and whether the data broker collects the personal information of minors, consumers' precise geolocation, or consumers' reproductive health care data. This bill would require a data broker to provide additional information to the agency, including whether the data broker collects consumers' names, dates of birth, ZIP Codes, email addresses, phone numbers, login or account information, various government identification numbers, mobile advertising, connected television, or vehicle identification numbers, citizenship data, union membership status, sexual orientation status, gender identity and gender expression data, biometric data, and up to 3, but no fewer than one, of the most common types of personal information that the data broker collects, as provided. The bill would also require a data broker to provide information regarding whether, in the past year, the data broker shared or sold consumers' data to a foreign actor, as defined, the federal government, other state governments, law enforcement, as provided, or a developer of a GenAI system, as defined. The bill would make changes to the administrative fines and costs that apply to data brokers who fail to register. Existing law requires, beginning January 1, 2026, the California Privacy Protection Agency to establish an accessible deletion mechanism that, among other things, allows a consumer, through a single verifiable consumer request, to request that every data broker that maintains any personal information delete any personal information related to that consumer held by the data broker or associated service provider or contractor. Existing law requires, beginning August 1, 2026, a data broker to access the accessible deletion mechanism at least once every 45 days and, among other things, process a denied request to delete personal information as an opt-out of the sale or sharing of the consumer's personal information under the CCPA, as specified. This bill would require a data broker to process the above-described denied request within 45 days of receiving the request. Existing law requires the agency to create a page on its internet website where registration information provided by data brokers and the accessible deletion mechanism is accessible to the public. This bill would prohibit the agency from making accessible to the public on its internet website information regarding whether the data broker collects consumers' names, dates of birth, zip codes, email addresses, phone numbers, mobile advertising, connected television, or vehicle identification numbers, and the most common types of personal information that it collects. This bill would declare that it furthers the purposes and intent of the CPRA for specified reasons.
- Introduced
- 2025-02-13
- Latest action
- 2025-10-08 — Chaptered by Secretary of State. Chapter 466, Statutes of 2025.
- Bill type
- bill
- Last updated
- —
Subjects
Sponsors
- Beckerauthor
Committees
Not provided by source.
Action timeline
2025-02-13
Introduced. Read first time. To Com. on RLS. for assignment. To print.
introduction,reading-1,referral-committee
2025-02-14
From printer. May be acted upon on or after March 16.
2025-02-26
Referred to Com. on JUD.
referral-committee
2025-03-18
Set for hearing April 1.
2025-03-24
From committee with author's amendments. Read second time and amended. Re-referred to Com. on JUD.
amendment-passage,committee-passage,reading-1,reading-2,referral-committee
2025-04-02
From committee: Do pass and re-refer to Com. on APPR. with recommendation: To consent calendar. (Ayes 13. Noes 0. Page 610.) (April 1). Re-referred to Com. on APPR.
committee-passage,committee-passage-favorable,referral-committee
2025-04-04
Set for hearing April 21.
2025-04-21
From committee: Be ordered to second reading pursuant to Senate Rule 28.8 and ordered to consent calendar.
committee-passage,reading-1,reading-2
2025-04-22
Read second time. Ordered to consent calendar.
reading-1,reading-2
2025-04-24
Read third time. Passed. (Ayes 37. Noes 0. Page 887.) Ordered to the Assembly.
passage,reading-1,reading-3
2025-04-24
In Assembly. Read first time. Held at Desk.
reading-1
2025-05-12
Referred to Com. on P. & C.P.
referral-committee
2025-06-25
From committee: Do pass as amended and re-refer to Com. on APPR. with recommendation: To consent calendar. (Ayes 15. Noes 0.) (June 24).
amendment-passage,committee-passage,committee-passage-favorable,referral-committee
2025-06-26
Read second time and amended. Re-referred to Com. on APPR.
amendment-passage,reading-1,reading-2,referral-committee
2025-07-09
From committee: Do pass. Ordered to consent calendar. (Ayes 15. Noes 0.) (July 9).
committee-passage,committee-passage-favorable
2025-07-10
Read second time. Ordered to consent calendar.
reading-1,reading-2
2025-07-14
Ordered to third reading.
reading-1,reading-3
2025-07-14
From consent calendar on motion of Assembly Member Aguiar-Curry.
2025-08-26
Ordered to third reading.
reading-1,reading-3
2025-08-26
Read third time and amended.
amendment-passage,reading-1,reading-3
2025-09-10
Read third time. Passed. (Ayes 79. Noes 0. Page 3168.) Ordered to the Senate.
passage,reading-1,reading-3
2025-09-10
In Senate. Concurrence in Assembly amendments pending.
2025-09-11
Assembly amendments concurred in. (Ayes 40. Noes 0. Page 2892.) Ordered to engrossing and enrolling.
amendment-passage,committee-passage,committee-passage-favorable
2025-09-22
Enrolled and presented to the Governor at 11 a.m.
executive-receipt
2025-10-08
Approved by the Governor.
executive-signature
2025-10-08
Chaptered by Secretary of State. Chapter 466, Statutes of 2025.
became-law
Versions
- 02/13/25 - Introduced — 2025-02-13Compare
- 03/24/25 - Amended Senate — 2025-03-24Compare
- 06/26/25 - Amended Assembly — 2025-06-26Compare
- 08/26/25 - Amended Assembly — 2025-08-26Compare
- 09/13/25 - Enrolled — 2025-09-13Compare
- 10/08/25 - Chaptered — 2025-10-08Compare
- SB361Compare
- (document, no version)Compare
Documents
- application/pdf
- application/pdf
- application/pdf
- application/pdf
- application/pdf
- application/pdf
- text/html
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
- application/pdf(no extracted text yet)
Votes
Do pass, but first be re-referred to the Committee on [Appropriations] with the recommendation: To Consent Calendar
2025-04-01 · pass · 13-0
Member-level votes (13)
- Ashby: yes
- Valladares: yes
- Arreguín: yes
- Weber Pierson: yes
- Caballero: yes
- Laird: yes
- Wahab: yes
- Allen: yes
- Niello: yes
- Stern: yes
- Durazo: yes
- Wiener: yes
- Umberg: yes
Consent Calendar 2nd
2025-04-24 · pass · 37-0
Member-level votes (40)
- Weber Pierson: yes
- Cervantes: yes
- Richardson: yes
- Menjivar: yes
- Seyarto: yes
- Limón: yes
- Durazo: yes
- Niello: yes
- McGuire: yes
- Blakespear: yes
- Laird: yes
- Cortese: yes
- Ashby: yes
- Grayson: yes
- Strickland: yes
- Cabaldon: yes
- Grove: yes
- Umberg: yes
- Wiener: yes
- Allen: yes
- Wahab: yes
- McNerney: yes
- Hurtado: yes
- Jones: yes
- Padilla: yes
- Choi: yes
- Stern: yes
- Gonzalez: yes
- Dahle: yes
- Arreguín: yes
- Alvarado-Gil: yes
- Becker: yes
- Caballero: yes
- Valladares: yes
- Pérez: yes
- Ochoa Bogh: yes
- Smallwood-Cuevas: yes
- Reyes: other
- Archuleta: other
- Rubio: other
Do pass as amended, and be re-referred to the Committee on [Appropriations] with recommendation: To Consent Calendar
2025-06-24 · pass · 15-0
Member-level votes (15)
- Ward: yes
- Bryan: yes
- Ortega: yes
- Pellerin: yes
- Irwin: yes
- Lowenthal: yes
- McKinnor: yes
- DeMaio: yes
- Wicks: yes
- Petrie-Norris: yes
- Dixon: yes
- Wilson: yes
- Bennett: yes
- Patterson: yes
- Hoover: yes
Do pass. To Consent Calendar.
2025-07-09 · pass · 15-0
Member-level votes (15)
- Dixon: yes
- Calderon: yes
- Solache: yes
- Caloza: yes
- Mark González: yes
- Elhawary: yes
- Pacheco: yes
- Pellerin: yes
- Fong: yes
- Hart: yes
- Tangipa: yes
- Wicks: yes
- Arambula: yes
- Ta: yes
- Sanchez: yes
SB 361 Becker Senate Third Reading By Wicks
2025-09-10 · pass · 79-0
Member-level votes (80)
- Addis: yes
- Haney: yes
- Elhawary: yes
- Carrillo: yes
- Ransom: yes
- Berman: yes
- Bauer-Kahan: yes
- Schiavo: yes
- Alvarez: yes
- Caloza: yes
- Hoover: yes
- Nguyen: yes
- Ortega: yes
- Solache: yes
- Lowenthal: yes
- Petrie-Norris: yes
- Gabriel: yes
- Zbur: yes
- DeMaio: yes
- Hadwick: yes
- Irwin: yes
- Patel: yes
- Kalra: yes
- Sanchez: yes
- Johnson: yes
- Mark González: yes
- Gipson: yes
- Hart: yes
- Calderon: yes
- Wilson: yes
- Soria: yes
- Valencia: yes
- Celeste Rodriguez: yes
- Connolly: yes
- Papan: yes
- Bonta: yes
- Jeff Gonzalez: yes
- Alanis: yes
- Patterson: yes
- Jackson: yes
- Davies: yes
- Pellerin: yes
- Muratsuchi: yes
- Krell: yes
- Chen: yes
- Quirk-Silva: yes
- Bains: yes
- Michelle Rodriguez: yes
- Arambula: yes
- Bennett: yes
- Ávila Farías: yes
- Aguiar-Curry: yes
- Lee: yes
- Castillo: yes
- Wallis: yes
- Stefani: yes
- Ta: yes
- Blanca Rubio: yes
- Gallagher: yes
- Ellis: yes
- Macedo: yes
- McKinnor: yes
- Ramos: yes
- Rivas: yes
- Ahrens: yes
- Dixon: yes
- Rogers: yes
- Ward: yes
- Fong: yes
- Wicks: yes
- Schultz: yes
- Pacheco: yes
- Boerner: yes
- Sharp-Collins: yes
- Bryan: yes
- Harabedian: yes
- Lackey: yes
- Flora: yes
- Garcia: yes
- Tangipa: other
Unfinished Business SB361 Becker Concurrence
2025-09-11 · pass · 40-0
Member-level votes (40)
- Valladares: yes
- Umberg: yes
- McGuire: yes
- Ochoa Bogh: yes
- Pérez: yes
- Cabaldon: yes
- Wiener: yes
- Jones: yes
- Reyes: yes
- McNerney: yes
- Dahle: yes
- Cervantes: yes
- Caballero: yes
- Menjivar: yes
- Allen: yes
- Archuleta: yes
- Limón: yes
- Durazo: yes
- Niello: yes
- Richardson: yes
- Hurtado: yes
- Blakespear: yes
- Seyarto: yes
- Gonzalez: yes
- Ashby: yes
- Padilla: yes
- Choi: yes
- Laird: yes
- Stern: yes
- Alvarado-Gil: yes
- Grayson: yes
- Rubio: yes
- Cortese: yes
- Smallwood-Cuevas: yes
- Grove: yes
- Strickland: yes
- Becker: yes
- Weber Pierson: yes
- Arreguín: yes
- Wahab: yes
Related bills
No related bills recorded for this bill.
Official source
Attribution
Data from openstates_bulk_csv, retrieved 2026-07-24T01:34:27.960412Z
Inspect retained evidence for changes recorded after evidence tracking began:
Use this data
Every field on this page is available from the free public API — no key or licence required. Fetch this bill as JSON: GET /api/v1/bills?jurisdiction=CA&identifier=SB 361. See the API docs or the MCP server for AI assistants.
Known limitations
- Sponsor party and chamber affiliation are not yet captured by this API.
- Committee referrals are not yet captured.
- Some documents have no extracted text yet, so version comparison may be limited.
See the methodology page for data sources and limitations.