CA AB370

Allows government agencies to extend the standard 10-day deadline for responding to public records requests by up to 14 days if a cyberattack prevents access to electronic servers or systems containing requested records

The cyberattack extension applies only until the agency regains access to its systems and can search for electronic records; agencies must still respond within normal timeframes for records stored elsewhere or in non-electronic formats

Tightens existing rules for state of emergency extensions by requiring the emergency to "currently and directly" affect the agency's ability to respond, rather than just "currently" affect it

Maintains existing requirements that agencies notify requesters within 10 days whether their request seeks disclosable records and provide an estimated date for record availability

Signed into law by the Governor on July 14, 2025, as Chapter 34