WeVote

Bill

Bill

AB 2021

California Consumer Privacy Act of 2018: whistleblower complaints.

2025-2026 Regular Session Introduced by Pilar Schiavo

AB 2021 establishes whistleblower complaint procedures under California's CCPA to enable reporting of privacy violations to state authorities with protections for reporters.

Read first time. To print.
0
WeVote Research Nonpartisan
Bill Summary · AB 2021

Legislative bill overview

AB 2021 amends California's Consumer Privacy Act (CCPA) to establish or strengthen whistleblower complaint mechanisms for individuals reporting privacy violations. The bill creates a formal process for private citizens to report alleged CCPA violations to appropriate state authorities rather than relying solely on private lawsuits or Attorney General enforcement.

Why is this important

The CCPA is California's flagship privacy law affecting millions of residents and businesses handling personal data. Whistleblower protections and complaint mechanisms improve enforcement by enabling workers and insiders with knowledge of privacy violations to report violations safely, potentially catching violations earlier and reducing the need for expensive litigation to achieve compliance.

Potential points of contention

  • Business compliance costs: Companies may argue that additional reporting channels create administrative burdens and uncertainty about which violations will be reported and by whom
  • Whistleblower protection scope: Disagreement over what legal protections apply to reporters (retaliation safeguards, confidentiality, immunity) and whether they extend to all employees or only certain categories
  • Attorney General resources: The bill may require state resources to investigate and process complaints, raising questions about funding and whether this diverts attention from other enforcement priorities

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.