Back to California

SB-435 • 2026

California Consumer Privacy Act of 2018: sensitive personal information.

California Consumer Privacy Act of 2018: sensitive personal information.

Crime Education Elections Privacy
Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
Wahab
Last action
2025-07-17
Official status
Coauthors revised.
Effective date
Not listed

Plain English Breakdown

The bill summary does not provide specific information regarding the exact penalties for non-compliance.

California Consumer Privacy Act of 2018: Sensitive Personal Information

The bill updates the California Consumer Privacy Act (CCPA) by removing exceptions for publicly available sensitive personal information and requires large elderly care facilities to have emergency backup power starting in 2030.

What This Bill Does

  • Updates privacy laws by removing a provision that excludes publicly available sensitive personal information from protection under the CCPA.
  • Requires for-profit residential care facilities with 16 or more residents to have an alternative source of power capable of providing electricity during emergencies for at least 72 hours starting January 1, 2030.
  • Extends the same requirement to nonprofit elderly care facilities with 16 or more residents starting January 1, 2032.

Who It Names or Affects

  • For-profit residential care facilities for the elderly with at least 16 residents
  • Nonprofit residential care facilities for the elderly with at least 16 residents

Terms To Know

Sensitive Personal Information
Information about a person that is considered private and needs special protection under privacy laws.
Emergency Backup Power Source
A power supply system designed to provide electricity during emergencies when regular power sources are not available.

Limits and Unknowns

  • The bill does not specify the exact penalties for non-compliance with backup power requirements.
  • It is unclear how facilities will be monitored and enforced to comply with these new regulations.

Bill History

  1. 2025-07-17 California Legislative Information

    Coauthors revised.

  2. 2025-07-16 California Legislative Information

    July 16 set for first hearing. Failed passage in committee. (Ayes 7. Noes 5.) Reconsideration granted.

  3. 2025-07-09 California Legislative Information

    July 8 hearing postponed by committee.

  4. 2025-06-27 California Legislative Information

    Re-referred to Com. on P. & C.P. pursuant to Assembly Rule 96.

  5. 2025-06-23 California Legislative Information

    From committee with author's amendments. Read second time and amended. Re-referred to Com. on AGING & L.T.C.

  6. 2025-06-17 California Legislative Information

    From committee with author's amendments. Read second time and amended. Re-referred to Com. on AGING & L.T.C.

  7. 2025-06-16 California Legislative Information

    Referred to Coms. on AGING & L.T.C and HUM. S.

  8. 2025-06-05 California Legislative Information

    In Assembly. Read first time. Held at Desk.

  9. 2025-06-04 California Legislative Information

    Read third time. Passed. (Ayes 39. Noes 0. Page 1493.) Ordered to the Assembly.

  10. 2025-05-23 California Legislative Information

    Read second time. Ordered to third reading.

  11. 2025-05-23 California Legislative Information

    From committee: Do pass. (Ayes 6. Noes 0. Page 1200.) (May 23).

  12. 2025-05-16 California Legislative Information

    Set for hearing May 23.

  13. 2025-05-05 California Legislative Information

    May 5 hearing: Placed on APPR. suspense file.

  14. 2025-04-25 California Legislative Information

    Set for hearing May 5.

  15. 2025-04-23 California Legislative Information

    Read second time and amended. Re-referred to Com. on APPR.

  16. 2025-04-22 California Legislative Information

    From committee: Do pass as amended and re-refer to Com. on APPR. (Ayes 5. Noes 0. Page 812.) (April 21).

  17. 2025-04-04 California Legislative Information

    Set for hearing April 21.

  18. 2025-03-28 California Legislative Information

    April 7 set for first hearing canceled at the request of author.

  19. 2025-03-24 California Legislative Information

    From committee with author's amendments. Read second time and amended. Re-referred to Com. on HUMAN S.

  20. 2025-03-13 California Legislative Information

    Set for hearing April 7.

  21. 2025-02-26 California Legislative Information

    Referred to Com. on HUMAN S.

  22. 2025-02-19 California Legislative Information

    From printer. May be acted upon on or after March 21.

  23. 2025-02-18 California Legislative Information

    Introduced. Read first time. To Com. on RLS. for assignment. To print.

Official Summary Text

SB 435, as amended, Wahab.
Residential care facilities for the elderly: emergency backup power source.
California Consumer Privacy Act of 2018: sensitive personal information.
The California Consumer Privacy Act of 2018 grants to a consumer various rights with respect to personal information that is collected by a business, including the right to direct a business that collects sensitive personal information about the consumer to limit its use of the consumer’s sensitive personal information, as defined, to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services, to perform certain other services, and as authorized by certain regulations. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency and vests the
agency with full administrative power, authority, and jurisdiction to enforce the CCPA.
Existing law provides that sensitive personal information that is publicly available, as defined, is not considered sensitive personal information or personal information.
This bill would remove that provision regarding publicly available sensitive personal information.
This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law provides for the licensure and regulation of residential care facilities for the elderly by the State Department of Social Services. Existing law requires residential care facilities for the elderly to have an emergency and disaster plan and requires the plan to include specified elements, including plans for the facility to be self-reliant for a period of not less than 72 hours immediately following any emergency or disaster, including, but not limited to, a short-term or long-term power failure. A violation of these provisions is punishable as a misdemeanor.
This bill, which would take effect on January 1, 2027, would require commencing January 1,
2030, a for-profit residential care facility for the elderly licensed to provide care for 16 or more residents in an assisted living unit, as defined, to have an alternative source of power, as defined, to protect residents’ health and safety for no fewer than 72 hours during any type of power outage. The bill would make that provision applicable to a nonprofit residential care facility for the elderly that provides care for 16 or more residents in an assisted living unit commencing January 1, 2032. The bill would impose specific compliance requirements based on whether the facility uses a generator as its alternative source of power, or batteries or a
combination of batteries in tandem with a renewable electrical generation facility. The bill would authorize a civil penalty, as specified, for a facility that fails to comply with these requirements, and would authorize the department to suspend or revoke the licensee’s license and permanently revoke a licensee’s ability to operate or act as an administrator of a facility anywhere in the state. The bill would specify that, for facilities with more than assisted living facilities, these requirements only apply to the assisted living portion of the facility.
This
bill would require a facility licensed to provide care for 16 or more residents in an assisted living unit to comply with these requirements and include information regarding the alternative source of power within the emergency and disaster plan beginning January 1, 2030, for a for-profit facility, and beginning January 1, 2032, for a nonprofit facility.
By
expanding the scope of an existing crime, the bill would impose a state-mandated local program.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.

Current Bill Text

Read the full stored bill text
Download Bill PDF