CA SB1172

Prohibits businesses providing proctoring services in educational settings from collecting, retaining, using, or disclosing personal information except what is strictly necessary to provide those services.

Allows collection and disclosure of personal information when necessary to comply with federal, state, or local law, court orders, subpoenas, or regulatory investigations.

Permits law enforcement agencies to direct businesses not to delete consumer information for 90 days during active investigations, with personal information only usable for responding to court orders or subpoenas.

Allows disclosure of personal information in emergencies when a natural person is at imminent risk of death or serious physical injury, provided the requesting agency agrees to seek a court order within three days or destroy the information.

Defines "personal information" using the same meaning as the California Consumer Privacy Act and "proctoring services" as including services to observe, monitor, or administer exams.