CA SB238

Requires employers to annually notify the Department of Industrial Relations of all workplace surveillance tools used, with employers using tools before January 1, 2026 required to report by February 1, 2026

Defines "workplace surveillance tool" broadly to include video/audio surveillance, geolocation tracking, biometrics, electromagnetic tracking, and continuous time-tracking systems that collect worker or public data

Mandates disclosure of tool creators, vendors managing the data, technological capabilities, personal information collected from workers and consumers, and whether opt-out options exist

Requires employers to identify all third parties with access to collected personal information and whether affected workers and consumers have been notified of surveillance

Applies to private employers, state and local government agencies, school districts, and special districts; excludes basic IT operations like spam filters and antivirus software from reporting requirements