Data broker registration: data collection.

Senator Becker's data privacy legislation expands California's oversight of data brokers by requiring them to disclose additional categories of personal information they collect and sell. The bill adds new reporting requirements for data brokers to specify whether they gather consumers' login credentials, government identification numbers, citizenship status, union membership, sexual orientation, and biometric data.

The measure builds upon existing state law that requires data brokers to register annually with the California Privacy Protection Agency and report certain data collection practices. Data brokers must continue paying registration fees to support the agency's oversight activities and face daily fines of $200 for failing to register or comply with consumer deletion requests. All penalties and fees are directed to the Data Brokers' Registry Fund to offset administrative and enforcement costs.

Beginning in 2029, data brokers must also report whether they have completed required audits and provide website links detailing how consumers can exercise their privacy rights, including requesting data deletion, correcting inaccurate information, and opting out of data sales. The legislation requires these consumer-facing webpages to avoid using deceptive "dark patterns" in their design.