California Senate Bill SB361

California 2025-2026 Regular Session

• Introduced: 10/14/25
• Introduced: 2/13/25
• Refer: 2/26/25
• Refer: 3/24/25
• Report Pass: 4/2/25
• Refer: 4/2/25
• Engrossed: 4/24/25
• Refer: 5/12/25
• Report Pass: 6/25/25
• Refer: 6/26/25
• Report Pass: 7/9/25
• Enrolled: 9/11/25
• Chaptered: 10/8/25
• Passed: 10/8/25

Caption

An act to amend Sections 1798.99.82, 1798.99.84, and 1798.99.86 of the Civil Code, relating to privacy.

Impact

The bill amends sections of the Civil Code, specifically targeting the operational protocols for data brokers. It imposes stricter regulations on how data brokers collect and handle personal information, including mandating that they delete consumer data within specific time frames upon request. This change is aimed at increasing transparency and accountability within the data broker industry, ultimately giving consumers greater control over their personal data and how it is shared or sold.

Summary

Senate Bill No. 361, referred to as the Data Brokers: Data Collection and Deletion Act, aims to enhance consumer privacy protections in California by expanding the disclosure requirements for data brokers. This legislation builds upon the existing framework set by the California Consumer Privacy Act (CCPA), providing consumers with more rights regarding their personal information. SB361 requires data brokers to register and provide detailed information about the types of personal information they collect, the purposes for which that information is used, and any data sharing practices, especially concerning third parties.

Sentiment

The reception of SB361 has generally been positive among consumer protection advocates and privacy rights groups, who view it as a significant step towards safeguarding personal information in the digital age. However, there are concerns from some sectors of the technology and marketing industries regarding the operational burdens the bill places on data brokers, which they argue could hinder innovation and the ability to provide personalized services. The debate showcases a conflict between consumer privacy interests and the business interests of data-driven companies.

Contention

Key points of contention surrounding SB361 include the balance between transparency and operational feasibility for data brokers. Critics argue that the extensive reporting requirements might inadvertently stifle smaller data broker companies that lack the resources to comply with the stringent measures, while supporters emphasize the necessity of such regulations for protecting consumer privacy from exploitation. The bill also prohibits the California Privacy Protection Agency from publicly disclosing sensitive information about the types of data collected, raising privacy concerns among consumer advocates about potential transparency issues.