republic-os/legislation/us/states/ca/20212022/ab-825.md

---
type: "Bill"
title: "Personal information: data breaches: genetic data."
description: "Existing law, the Information Practices Act of 1977, requires an agency that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was compromised, as specified. Existing law also requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices. Existing law requires a person or business that conducts business in California, and that owns or licenses computerized data that includes personal information, to disclose a breach of the security of the system following discovery or notification of the breach."
jurisdiction: "us/states/ca"
legislature: "California Legislature"
session: "20212022"
identifier: "AB 825"
citation: "California AB 825 (20212022)"
classification: ["bill"]
subjects: ["Personal information: data breaches: genetic data."]
status: "enacted"
primary_sponsors: ["Levine"]
version_count: 5
action_count: 23
vote_count: 9
first_action: "2021-02-16"
last_action: "2021-10-05"
source: "openstates"
source_identifier: "ocd-bill/ee9921fe-586a-42af-89b2-195f26933eb7"
source_url: "http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB825"
source_hash: "3d1410fcd7c037ae72ee4220063dff030688643cb719a17b65cdc7680c880b9e"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-ca"]
---

# California AB 825 (20212022) — Personal information: data breaches: genetic data.

Existing law, the Information Practices Act of 1977, requires an agency that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was compromised, as specified. Existing law also requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices. Existing law requires a person or business that conducts business in California, and that owns or licenses computerized data that includes personal information, to disclose a breach of the security of the system following discovery or notification of the breach.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **02/16/21 - Introduced** (filed) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB825&version=20210AB82599INT)
2. **03/26/21 - Amended Assembly** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB825&version=20210AB82598AMD)
3. **10/05/21 - Chaptered** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB825&version=20210AB82596CHP)
4. **AB825** (committee substitute) — [source](http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB825)
5. **09/10/21 - Enrolled** (enrolled) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=202120220AB825&version=20210AB82597ENR)

## Votes

- Do pass and be re-referred to the Committee on [Appropriations] — **11–0** (pass) · lower
- AB 825 Levine Assembly Third Reading — **75–0** (pass) · lower
- Placed on suspense file — **6–0** (pass) · upper
- 3rd Reading AB825 Levine By Umberg — **30–0** (pass) · upper
- Do pass. — **16–0** (pass) · lower
- 3rd Reading AB825 Levine By Umberg — **30–0** (pass) · upper
- Do pass, but first be re-referred to the Committee on [Appropriations] — **10–1** (pass) · upper
- Do pass — **5–2** (pass) · upper
- 3rd Reading AB825 Levine By Umberg Reconsider — **37–0** (pass) · upper

## Sponsors

- Levine — primary (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2021-02-16** Read first time. To print. `reading-1`
- **2021-02-17** From printer. May be heard in committee March 19.
- **2021-02-25** Referred to Com. on P. & C.P. `referral-committee`
- **2021-03-26** From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended. `amendment-introduction, amendment-passage, reading-1, reading-2`
- **2021-03-29** Re-referred to Com. on P. & C.P. `referral-committee`
- **2021-04-08** From committee: Do pass and re-refer to Com. on APPR. (Ayes 11. Noes 0.) (April 8). Re-referred to Com. on APPR. `committee-passage, committee-passage-favorable, referral-committee`
- **2021-04-21** In committee: Set, first hearing. Referred to APPR. suspense file. `referral-committee`
- **2021-05-20** From committee: Do pass. (Ayes 16. Noes 0.) (May 20). `committee-passage, committee-passage-favorable`
- **2021-05-24** Read second time. Ordered to third reading. `reading-1, reading-2`
- **2021-05-27** Read third time. Passed. Ordered to the Senate. (Ayes 75. Noes 0. Page 1649.) `passage, reading-1, reading-3`
- **2021-05-28** In Senate. Read first time. To Com. on RLS. for assignment. `reading-1`
- **2021-06-09** Referred to Com. on JUD. `referral-committee`
- **2021-06-23** From committee: Do pass and re-refer to Com. on APPR. (Ayes 10. Noes 1.) (June 22). Re-referred to Com. on APPR. `committee-passage, committee-passage-favorable, referral-committee`
- **2021-07-05** In committee: Referred to suspense file. `referral-committee`
- **2021-08-26** From committee: Do pass. (Ayes 5. Noes 2.) (August 26). `committee-passage, committee-passage-favorable`
- **2021-08-26** Read second time. Ordered to third reading. `reading-1, reading-2`
- **2021-09-08** Read third time. Passed. Ordered to the Assembly. (Ayes 30. Noes 0. Page 2483.). `passage, reading-1, reading-3`
- **2021-09-08** Reconsideration granted. (Ayes 37. Noes 0. Page 2483.)
- **2021-09-08** Read third time. Passed. Ordered to the Assembly. (Ayes 30. Noes 0. Page 2484.). `passage, reading-1, reading-3`
- **2021-09-08** In Assembly. Ordered to Engrossing and Enrolling. `committee-passage`
- **2021-09-20** Enrolled and presented to the Governor at 3 p.m.
- **2021-10-05** Approved by the Governor. `executive-signature`
- **2021-10-05** Chaptered by Secretary of State - Chapter 527, Statutes of 2021. `became-law`

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/ee9921fe-586a-42af-89b2-195f26933eb7`. Confidence: reported (aggregated from official California legislature records).