CA AB1355

Prohibits covered entities from collecting or processing an individual's location information unless necessary to provide requested goods or services, and bans selling, renting, trading, or leasing location data to third parties

Defines "location information" broadly to include GPS coordinates, IP addresses, cell-site data, automated license plate recognition data, traffic monitoring images, and facial recognition probe images that reveal location within 5 miles or less

Requires covered entities to display prominent notices at points of location data collection and maintain a location privacy policy detailing data types collected, retention schedules, service providers involved, and security measures

Creates liability for violations including actual damages or statutory damages of $25,000 (whichever is greater), plus potential exemplary damages, injunctive relief, and attorney's fees; authorizes the Attorney General and local prosecutors to seek $25,000 civil penalties

Prohibits state and local agencies from monetizing location information and bars disclosure of location data to government agencies without a valid California court order that complies with state laws including reproductive privacy protections