United States of America: Bill amending Civil Code to include provisions on data collection and deletion by data brokers was adopted by California Legislature

On 11 September 2025, the Bill amending the Civil Code to include provisions on data collection and deletion by data brokers was adopted by the California Legislature. The Bill amends the California Consumer Privacy Act of 2018 to broaden disclosure and registration obligations for data brokers. The Bill applies to businesses that knowingly collect and sell consumers’ personal information without a direct relationship with those consumers. It requires data brokers registering with the California Privacy Protection Agency to provide additional details on the categories of personal information they collect, including consumers’ names, dates of birth, government identification numbers and login credentials. It also requires them to provide citizenship data, union membership status, sexual orientation, gender identity and expression, biometric data, and precise geolocation. It also requires them to disclose whether they have sold or shared data with foreign actors, government authorities, or developers of generative AI systems. Non-compliance may result in administrative fines.