Heard

Sign InJoin Heard

Legislative record

AB 1159STATE · CaliforniaIntroduced

Student personal information.

Existing law, the K–12 Pupil Online Personal Information Protection Act (KOPIPA) , generally protects the personal information of a student enrolled in a K–12 course of instruction, defined as a "pupil," by prescribing requirements and prohibitions applicable to an operator of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used primarily for K–12 school purposes and was designed and marketed for K–12 school purposes. Existing law, the Early Learning Personal Information Protection Act (ELPIPA) , generally protects the personal information of a child enrolled in a preschool or prekindergarten course of instruction, defined as a "pupil," by prescribing requirements and prohibitions applicable to an operator of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used primarily for preschool or prekindergarten purposes and was designed and marketed for preschool and prekindergarten purposes. This bill would instead apply the provisions of KOPIPA and ELPIPA to an operator, or an entity working on behalf of the operator, of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used for the applicable school purposes and was designed or marketed for those purposes, as specified. The bill would, among other changes to KOPIPA and ELPIPA related to protecting the personal information of students, prohibit an operator from using covered information, as defined, including persistent unique identifiers, created or gathered by the operator's site, service, or application to train a generative artificial intelligence system or service or develop an artificial intelligence system. This bill would also enact the Higher Education Student Information Protection Act (HESIPA) , which would generally protect the personal information of a student enrolled in a higher education institution, as defined, in a similar manner as KOPIPA and ELPIPA. The bill would make HESIPA operative on July 1, 2027. This bill would authorize a pupil or student actually harmed by noncompliance with KOPIPA, ELPIPA, or HESIPA to bring a civil action against the noncompliant operator, as prescribed, and would require a person bringing that action to furnish a copy of the complaint to the Attorney General within 10 days after filing the action.

Voted 9/10/2026View source

Roll-call record

How representatives voted

64 yea·5 nay

Docket history

Action history

  1. 7/22/2026In committee: Hearing postponed by committee.
  2. 6/23/2026From committee: Do pass and re-refer to Com. on APPR. (Ayes 7. Noes 0.) (June 22). Re-referred to Com. on APPR.
  3. 6/10/2026From committee: Do pass and re-refer to Com. on P., D.T., & C.P. (Ayes 4. Noes 0.) (June 10). Re-referred to Com. on P., D.T., & C.P.
  4. 5/20/2026Referred to Coms. on ED. and P., D.T., & C.P.
  5. 1/27/2026In Senate. Read first time. To Com. on RLS. for assignment.
  6. 1/26/2026Read third time. Passed. Ordered to the Senate. (Ayes 65. Noes 5. Page 3835.)
  7. 1/22/2026Assembly Rule 63 suspended. (Page 3806.)
  8. 1/22/2026In committee: Set, first hearing. Referred to suspense file.
  9. 1/22/2026From committee: Do pass. (Ayes 14. Noes 1.) (January 22).
  10. 1/22/2026Read second time. Ordered to third reading.