SB 1268 Summary

• Prohibits transportation agencies from selling or providing personally identifiable information collected through electronic toll collection systems, with limited exceptions for law enforcement with search warrants and interagency data sharing for interoperability.

• Requires transportation agencies to establish and publicly post privacy policies describing collected information types, data sharing practices, notification procedures for policy changes, and subscriber rights to review and modify their information.

• Mandates agencies discard non-essential personal information no later than four years and six months after billing cycle closure or account termination, while retaining only basic account information necessary for billing and enforcement.

• Allows individuals whose personally identifiable information is knowingly sold or provided in violation of the law to sue for actual damages or $2,500 per violation (or $4,000 for three or more violations), plus attorney's fees and costs.

• Authorizes transportation agencies to impose administrative fees on system users to cover implementation costs of these privacy protections.