State and local government: data protection and privacy: immigration.

Assembly Member Caloza's data privacy legislation places new restrictions on how state and local agencies collect and share immigration-related personal information, requiring judicial oversight for data transfers to federal immigration authorities. The bill prohibits agencies from gathering immigration status details, biometric data, and other personally identifiable information unless explicitly mandated by law and justified by legitimate government purposes.

The measure establishes a multi-layered oversight framework, requiring the State Auditor to review all government data-sharing agreements every two years for compliance with privacy and civil rights protections. A new task force within the Attorney General's office would monitor unauthorized data collection, investigate complaints, and provide annual reports to the Legislature on privacy trends and risks. Any agreements between state or local agencies and federal immigration authorities must incorporate specific oversight provisions subject to auditor review.

The Attorney General holds enforcement authority through administrative actions and civil penalties against agencies that improperly collect or share personal data. While the bill creates additional responsibilities for local governments, qualifying them for state reimbursement if mandated costs are determined, it requires no new appropriations. The provisions build upon existing state laws governing law enforcement databases and information sharing between state agencies and federal immigration authorities.