California advances new privacy and data protection laws

California has advanced two significant pieces of privacy legislation. Governor Gavin Newsom approved Assembly Bill 2624, which expands the state’s Safe at Home program. Starting October 1, 2027, immigration support service providers, employees, and volunteers will be eligible to keep their home addresses confidential and out of public records. The law also prohibits the intentional online posting of participants' personal information with the intent to incite imminent bodily harm.

Separately, the California State Legislature approved the Expanding Privacy Rights Act (SB 923). This bill aims to close a loophole in the California Consumer Privacy Act (CCPA) by expanding the right to delete personal information. Under the new proposal, businesses would be required to delete all non-exempt personal information collected about a consumer, including data obtained from third parties. The bill now moves to the Governor for consideration.