California. Sectoral privacy. Act
Shine the LightCalifornia 'Shine the Light' law (Cal. Civ. Code § 1798.83)
In force
Partly verified
Medium confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.
§1Summary
- Synopsis
Lets California customers ask businesses with 20+ employees which categories of personal information they disclosed to third parties for those parties' direct marketing in the prior year, and to whom.
- Key themes
- Unique features
Pre-dates CCPA; still in force alongside it with its own private right of action.
- SaaS relevance
Relevant where a SaaS business shares customer data with others for their own marketing.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Up to $500 per violation, $3,000 if wilful, plus fees
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text leginfo.legislature.ca.gov
- Authority
- California Attorney General; private litigants
§5Where it applies
- Domestic law of
- California
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.