SB 1348 Summary

• Requires data brokers selling California residents' personal information to third parties to allow individuals to review their personal information through a secure online system and to conspicuously post opt-out instructions on their website

• Mandates data brokers cease sharing or selling an individual's personal information within 30 days of receiving an opt-out demand and retain only information reasonably necessary to comply with the demand

• Prohibits data brokers from charging fees to review or permanently remove personal information from their database

• Allows individuals to file civil actions against violators for damages of at least $1,000 per violation or actual damages, whichever is greater, plus attorney's fees and costs

• Excludes consumer reporting agencies, credit reporting agencies, entities under Gramm-Leach-Bliley Act, and media outlets from data broker regulations