CA AB928

Requires each state department and agency to conspicuously post its privacy policy on its Internet website in adherence with the Information Practices Act of 1977.

Privacy policies must include six key principles: lawful collection of information, specified purposes at time of collection, restrictions on disclosure without consent, relevance of data collected, protection measures against unauthorized access, and designation of a privacy policy position within each department or agency.

Defines "conspicuously post" to include posting the actual policy on the homepage, using a privacy icon or text link on the homepage or first significant page, provided the link is distinguishable by color, size, or contrasting type.

Allows hyperlinks to meet posting requirements if they are displayed in a manner that a reasonable person would notice and understand to link to the privacy policy.