WeVote

Bill

Bill

AB 1355

Location privacy.

2025-2026 Regular Session Introduced by Cecilia Aguiar-Curry and 4 co-sponsors

The bill restricts private entities from collecting or monetizing precise location data without consent or necessity, and bans state/local agencies from monetizing such data.

From committee: Filed with the Chief Clerk pursuant to Joint Rule 56.
0
WeVote Research Nonpartisan
Bill Summary · AB 1355

AB 1355 — Location privacy (Ward) — Summary

Status: Introduced Feb 21, 2025; last action — In committee: Held under submission (05/23/2025).
Legal placement: Adds Civil Code §1798.14.5 and a new Title 1.81.24 (commencing at §1798.90.75), captioned the “California Location Privacy Act.”

Purpose

Establish limits and procedural requirements for collecting, processing, disclosing, and monetizing location information about individuals in California. The bill tightens protections for location data beyond existing CCPA/CPRA sensitive personal information rules and prohibits state/local agencies from monetizing location data.

Key definitions (select)

  • Location information: information that directly or indirectly reveals present or past geographical location of a person or device within California with sufficient precision to identify street-level location within a range of five miles or less. Examples specifically listed include IP addresses capable of revealing physical location, GPS coordinates, cell‑site location, ALPR (automated license plate recognition) data, traffic/speed camera images, and probe images used in facial recognition systems.
  • Covered entity: any person or private organization (includes agents); explicitly excludes state or local agencies and courts.
  • Monetize: collect, process, or disclose location information for profit or other consideration (e.g., sell, rent, trade, lease). Excludes disclosure of public records under the California Public Records Act.

Main requirements and prohibitions

  • Private covered entities: Prohibited from collecting or processing an individual’s location information unless doing so is necessary to provide goods or services requested by that individual.
  • Point-of-capture notice: When a covered entity captures location information, it must prominently display a notice stating that location information is being collected, identifying the covered entity and any service provider collecting the data, and providing a phone number and website for more information.
  • Location privacy policy: Covered entities must maintain and make available to the data subject a location privacy policy describing data uses and management (details referenced in the bill) and follow specified notice procedures.
  • State and local agencies: Section 1798.14.5 prohibits each agency from monetizing location information, consistent with the new Title. (Agencies are thus treated separately from covered entities and subject to the monetization ban.)

Enforcement, remedies, and compliance

  • Private right of action: A covered entity that violates the bill’s provisions may be liable for actual or statutory damages suffered by a person denied a right under the law, plus other relief specified in the bill.
  • Public enforcement: The Attorney General and other public prosecutors are authorized to bring actions to recover civil penalties for violations.
  • Businesses subject to CCPA/CPRA: The bill requires businesses as defined by the CCPA to comply with these location privacy provisions.

Fiscal and procedural notes

  • Fiscal committee: Yes. The bill creates new requirements for local agencies (a state‑mandated local program). If the Commission on State Mandates determines the bill imposes costs, reimbursement to local agencies would be required under existing statutory procedures.
  • Legislative history highlights: Introduced 02/21/2025; amended in committee (April–May 2025); referred to Appropriations suspense file and held under submission on 05/23/2025.

Who is affected

  • Private businesses and covered entities that collect/handle location data (apps, advertisers, data brokers, mapping/ride‑sharing services, fleet/telematics firms).
  • State and local agencies (restricted from monetizing location data; may incur compliance costs).
  • California residents — broader protection for location privacy and potential damages/remedies for violations.

Overall, AB 1355 would significantly narrow permissible uses of precise location data by private actors, impose transparency and policy obligations at the point of collection, and bar public agencies from monetizing location information.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.