Back to California

AB-1337 • 2026

Information Practices Act of 1977.

Information Practices Act of 1977.

Crime Education Healthcare Labor Privacy
Active

The official status still shows this bill as active or still awaiting another formal step.

Sponsor
Ward
Last action
Official status
Senate - Privacy, Digital Technologies, and Consumer Protection
Effective date
Not listed

Plain English Breakdown

The official status shows the bill passed both chambers but also notes a hearing was canceled at the author's request; final enactment depends on executive action not shown in the provided metadata.

AB-1337: Updates Rules on Personal Information

Starting January 1, 2028, this law removes exemptions for local agencies under the Information Practices Act of 1977 and expands rules on how personal information is collected, used, and shared.

What This Bill Does

  • Removes the exemption that currently keeps cities, counties, school districts, and other local public agencies from following these privacy laws.
  • Changes the rule for periodic notices when collecting personal information to require them at least once every three years instead of annually.
  • Prohibits agencies from using records containing personal information for any purpose other than why it was collected, unless state or local law allows it.
  • Updates rules on sharing linked personal information by allowing disclosure for specific reasons related to real property, social safety net programs, and medical data.
  • Makes negligent violations of the act a reason for employee discipline, in addition to intentional violations.
  • Removes the requirement that wrongful sharing of medical or psychological records must cause economic loss or injury to be punishable as a crime.

Who It Names or Affects

  • State agencies
  • Local public agencies including cities, counties, and school districts
  • Employees who design, operate, or maintain records containing personal information

Terms To Know

Personal Information
Data collected by an agency that can be linked to a specific individual; the bill revises and expands this definition.
State-Mandated Local Program
A new duty or cost placed on local agencies by the state government, which may require reimbursement from the state.

Limits and Unknowns

  • The bill states that certain mandates will not require reimbursement for a specified reason but does not list those specific reasons in this summary.
  • Reimbursement for other costs depends on whether the Commission on State Mandates determines they are mandated by the state.

Bill History

  1. California Legislative Information

    Senate - Privacy, Digital Technologies, and Consumer Protection

Official Summary Text

Information Practices Act of 1977.