Location privacy.

Assembly Member Ward's California Location Privacy Act would establish new requirements for businesses collecting and using individuals' location data, mandating explicit opt-in consent and limiting data collection to what is necessary for requested services. The legislation defines location information broadly to include GPS coordinates, IP addresses, automated license plate reader data, and other geographic identifiers precise enough to determine street-level locations within five miles.

Under the proposed law, covered entities must prominently display notices where location data is captured and maintain detailed privacy policies outlining data usage, security measures, and retention schedules. The bill prohibits selling or leasing location information to third parties and requires 20 days' advance notice of privacy policy changes. Government agencies would be barred from monetizing location data, though the bill exempts healthcare providers collecting patient information protected under existing privacy laws.

The legislation creates enforcement mechanisms allowing individuals to seek damages for violations, with civil penalties up to $25,000 per incident. The Attorney General and local prosecutors could pursue legal action against non-compliant entities, with a three-year statute of limitations. The bill provides for court-awarded attorney fees and injunctive relief to prevent future violations.