CA AB1337

Removes the current exemption for local agencies (counties, cities, school districts, municipal corporations, districts) from the Information Practices Act of 1977, extending all privacy requirements to local government entities

Expands the definition of "personal information" to include biometric data, genetic data, neural data, precise geolocation, IP addresses, vehicle registration information, email/text contents, health information, and data in digital formats including AI systems capable of outputting personal information

Prohibits agencies from using personal information for purposes other than those for which it was collected, except as authorized or required by state law (removing previous federal law exception)

Makes both intentional and negligent violations of the Act grounds for employee discipline, including termination; removes the requirement that wrongful disclosure of medical/psychiatric information must result in economic loss or personal injury to be punishable as a misdemeanor

Revises conditions for disclosing personal information to federal agencies, now requiring state law authorization rather than federal law authorization for such disclosures