Back to California

AB-370 • 2026

California Public Records Act: cyberattacks.

California Public Records Act: cyberattacks.

Education
Enacted

This bill passed the Legislature and reached final enactment based on the latest official action.

Sponsor
Carrillo
Last action
Official status
Chaptered
Effective date
Not listed

Plain English Breakdown

The official text states no reimbursement is required for a 'specified reason' but does not list that specific reason in the summary provided.

AB-370: Public Records and Cyberattacks

This law adds cyberattacks to the list of unusual circumstances that allow government agencies extra time to answer public record requests if they cannot access their electronic systems.

What This Bill Does

  • Adds 'cyberattack' as a reason for delay when an agency cannot access its electronic servers or systems needed to find records.
  • Limits the extension period so it ends once the agency can access its systems and search for records again.
  • Tightens the rules for using a state of emergency, requiring that the emergency directly affects the ability to respond due to staffing shortages or facility closures.
  • Includes official statements explaining how these changes fit with state constitutional requirements for public access.

Who It Names or Affects

  • State agencies in California
  • Local government agencies and school districts

Terms To Know

California Public Records Act (CPRA)
The state law that requires government agencies to let the public see their official documents.
Unusual circumstances
Specific situations, like emergencies or cyberattacks, where an agency is allowed more time than usual to answer a request.

Limits and Unknowns

  • The law does not specify how long the delay can last if it takes months for an agency to fix its computer systems after a cyberattack.
  • The bill states that no state money will be given back to local agencies or school districts for costs caused by these new rules.

Bill History

  1. California Legislative Information

    Chaptered

Official Summary Text

California Public Records Act: cyberattacks.