---
type: "Bill"
title: "Unlawfully obtained data."
description: "Existing law, the California Consumer Privacy Act of 2018, authorizes a consumer whose nonencrypted and nonredacted personal information, as defined, is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of a business' violation of the duty to implement and maintain reasonable security procedures and practices appropriate to the nature of the information to protect the personal information may institute a civil action, as specified."
jurisdiction: "us/states/ca"
legislature: "California Legislature"
session: "20212022"
identifier: "AB 1391"
citation: "California AB 1391 (20212022)"
classification: ["bill"]
subjects: ["Unlawfully obtained data."]
status: "enacted"
primary_sponsors: ["Chau"]
version_count: 8
action_count: 25
vote_count: 6
first_action: "2021-02-19"
last_action: "2021-10-06"
source: "openstates"
source_identifier: "ocd-bill/e4318738-7bb8-4752-bb93-e8ca768634e4"
source_url: "http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB1391"
source_hash: "43575522c5e7dd79ee4bffc7ac6e7e9b2b21afcc6c08070f97ee90913de3f1e7"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-ca"]
---

# California AB 1391 (20212022) — Unlawfully obtained data.

Existing law, the California Consumer Privacy Act of 2018, authorizes a consumer whose nonencrypted and nonredacted personal information, as defined, is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of a business' violation of the duty to implement and maintain reasonable security procedures and practices appropriate to the nature of the information to protect the personal information may institute a civil action, as specified.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **02/19/21 - Introduced** (filed) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139199INT)
2. **04/12/21 - Amended Assembly** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139198AMD)
3. **06/16/21 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139197AMD)
4. **06/24/21 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139196AMD)
5. **08/16/21 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139195AMD)
6. **10/06/21 - Chaptered** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139193CHP)
7. **AB1391** (committee substitute) — [source](http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB1391)
8. **09/03/21 - Enrolled** (enrolled) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB1391&version=20210AB139194ENR)

## Votes

- Do pass as amended. To Consent Calendar. — **11–0** (pass) · lower
- Do pass, but first be re-referred to the Committee on [Public Safety] — **11–0** (pass) · upper
- 3rd Reading AB1391 Chau By Laird — **39–0** (pass) · upper
- AB 1391 Chau Consent Calendar Second Day — **78–0** (pass) · lower
- AB 1391 Chau Concurrence in Senate Amendments — **78–0** (pass) · lower
- Do pass — **5–0** (pass) · upper

## Sponsors

- Chau — primary (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2021-02-19** Introduced. To print. `introduction`
- **2021-02-20** From printer. May be heard in committee March 22.
- **2021-02-22** Read first time. `reading-1`
- **2021-03-11** Referred to Com. on P. & C.P. `referral-committee`
- **2021-04-08** From committee: Amend, and do pass as amended. To Consent Calendar. (Ayes 11. Noes 0.) (April 8). `amendment-introduction, amendment-passage, committee-passage`
- **2021-04-12** Read second time and amended. Ordered returned to second reading. `amendment-passage, reading-1, reading-2`
- **2021-04-13** Read second time. Ordered to Consent Calendar. `reading-1, reading-2`
- **2021-04-19** Read third time. Passed. Ordered to the Senate. (Ayes 78. Noes 0. Page 1071.) `passage, reading-1, reading-3`
- **2021-04-19** In Senate. Read first time. To Com. on RLS. for assignment. `reading-1`
- **2021-05-12** Referred to Coms. on JUD. and PUB. S. `referral-committee`
- **2021-06-08** From committee: Do pass and re-refer to Com. on PUB. S. (Ayes 11. Noes 0.) (June 8). Re-referred to Com. on PUB. S. `committee-passage, committee-passage-favorable, referral-committee`
- **2021-06-16** From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on PUB. S. `amendment-introduction, amendment-passage, reading-1, reading-2, referral-committee`
- **2021-06-22** In committee: Testimony taken. Hearing postponed by committee.
- **2021-06-24** From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on PUB. S. `amendment-introduction, amendment-passage, reading-1, reading-2, referral-committee`
- **2021-06-30** From committee: Do pass. (Ayes 5. Noes 0. Page 1721.) (June 29). `committee-passage, committee-passage-favorable`
- **2021-07-01** Read second time. Ordered to third reading. `reading-1, reading-2`
- **2021-08-16** Read third time and amended. Ordered to second reading. `amendment-passage, reading-1, reading-3`
- **2021-08-17** Read second time. Ordered to third reading. `reading-1, reading-2`
- **2021-08-30** Read third time. Passed. Ordered to the Assembly. (Ayes 39. Noes 0. Page 2225.). `passage, reading-1, reading-3`
- **2021-08-31** In Assembly. Concurrence in Senate amendments pending. May be considered on or after September 2 pursuant to Assembly Rule 77.
- **2021-09-01** Assembly Rule 77 suspended. (Ayes 58. Noes 17. Page 2625.)
- **2021-09-01** Senate amendments concurred in. To Engrossing and Enrolling. (Ayes 78. Noes 0. Page 2656.). `amendment-passage, committee-passage-favorable`
- **2021-09-09** Enrolled and presented to the Governor at 4 p.m.
- **2021-10-06** Approved by the Governor. `executive-signature`
- **2021-10-06** Chaptered by Secretary of State - Chapter 594, Statutes of 2021. `became-law`

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/e4318738-7bb8-4752-bb93-e8ca768634e4`. Confidence: reported (aggregated from official California legislature records).