WeVote
Log In

Bill

Bill

AB 370

California Public Records Act: cyberattacks.

2025-2026 Regular Session Introduced by Juan Carrillo

AB 370 exempts cybersecurity vulnerability and attack information from California public records disclosure to prevent future exploitation while maintaining government transparency safeguards.

Chaptered by Secretary of State - Chapter 34, Statutes of 2025.
#californiapublicrecordsact #cyberattacks
0
WeVote Research Nonpartisan
Bill Summary · AB 370

Legislative bill overview

AB 370 amends California's Public Records Act to establish exemptions for records related to cyberattacks on public agencies. The bill allows government entities to withhold specific information about cybersecurity vulnerabilities, attack methods, and response strategies from public disclosure to protect critical infrastructure and prevent future attacks.

Why is this important

As cyberattacks on government systems increase in frequency and sophistication, agencies face tension between transparency obligations and security needs. This law recognizes that disclosing certain cybersecurity details could enable malicious actors to exploit vulnerabilities, while balancing the public's right to know about threats to their government's operations and data.

Potential points of contention

  • Overreach concerns: The exemption's scope and definition may be broad enough to allow agencies to withhold information beyond what's necessary for security, reducing government accountability and transparency.
  • Public interest in incidents: Citizens have legitimate interests in knowing whether their personal data was compromised in cyberattacks; overly broad exemptions could obscure information about actual breaches affecting residents.
  • Lack of oversight mechanisms: The bill may not include sufficient requirements for agencies to demonstrate that withheld information truly poses security risks, or independent review procedures to prevent abuse of the exemption.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.