State and local government: data protection and privacy: immigration.

Existing law, the California Values Act, prohibits California law enforcement agencies from using agency or department moneys or personnel to investigate, interrogate, detain, detect, or arrest persons for immigration enforcement purposes, including, among other things, providing personal information about an individual, making or intentionally participating in arrests based on civil immigration warrants, or performing the functions of an immigration officer, as specified.

This bill would prohibit a state or local government agency from collecting immigration-related personally identifiable information unless it is explicitly required by law to do so and the collection is justified by a legitimate government purpose. The bill would prohibit a state or local government agency from sharing personally identifiable information with federal immigration enforcement agencies without a judicial warrant or court order. The bill would require any contract, agreement, or memorandum of understanding that facilitate data sharing between a state or local government agency and federal immigration enforcement authorities to comply with oversight mechanisms to ensure compliance with civil rights and privacy protections and be subject to review by the State Auditor, as described below. Because the bill would require local agencies to perform additional duties, it would impose a state-mandated local program. The bill would make these provisions enforceable by administrative action or by imposition of a civil penalty recovered by an action brought by the Attorney General.

This bill would require the State Auditor to conduct audits of all state and local government agency data-sharing agreements at least every 2 years to ensure compliance with existing laws protecting privacy and civil rights. The bill would require the Office of the Attorney General to establish an oversight task force to review complaints and violations related to unauthorized data collection and sharing that would report to the Legislature annually on data privacy trends, risks, and policy recommendations.

The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.

This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.