CA AB322

Requires businesses collecting precise geolocation information to prominently display a notice stating the business name, type of location data collected, purposes for collection, third parties who may receive the data, and contact information for consumers

Prohibits businesses from retaining precise geolocation information longer than necessary to provide requested goods/services or longer than one year after the consumer's last intentional interaction, whichever is earlier

Bans the sale, trade, or leasing of precise geolocation information to third parties

Prohibits disclosure of precise geolocation data to state or local government agencies without a valid California court order (or equivalent from another jurisdiction consistent with California law, including reproductive privacy protections)

Allows limited collection of geolocation data for security incidents, fraud, or illegal activity investigations, but such data must be deleted within 30 days