The California Legislature has introduced a flurry of bills with technology implications this session, among them legislation to create new data tracking platforms, solidify cybersecurity best practices and create innovation opportunities.
While these bills are far from a sure thing this early in the session, they could provide valuable insights into lawmakers’ priorities and some of the near- and far-term opportunities.
Here are a handful of those bills industry would be wise to watch as they move (or not) toward the governor’s desk for a signature.
AB 869 — Zero-Trust Architecture (Irwin)
This bill was introduced Feb. 19 and takes a new look at a well-established cybersecurity best practice — zero-trust architecture. If successful, the legislation would require all state agencies, with some exceptions, to implement the architecture for “all data, hardware, software, internal systems and essential third-party software, including for on-premises, cloud and hybrid environments.”
The bill would also mandate that state agencies “prioritize the use of solutions that comply with, are authorized by or align to federal guidelines, programs and frameworks and, at a minimum, prioritize multifactor authentication for access to all systems and data, enterprise endpoint detection and response solutions and robust logging practices.”
As of April 2, the bill was approved by the Assembly Privacy and Consumer Protection Committee and re-referred to the Committee on Appropriations.
AB 270 — Autonomous Firefighting Technology (Petrie-Norris)
California’s ongoing battle against damaging wildfires could see new technology being added to the mix under AB 270, which would require the Department of Forestry and Fire Protection (CAL FIRE) to test and evaluate “firefighting aircraft equipped with autonomous aerial suppression technology.”
Earlier drafts of the legislation described an autonomous firefighting helicopter, while later versions seem to walk back that language, instead referencing autonomous technologies. It’s unclear whether this technology would supplement existing aircraft or be wholly new aircraft. As part of this bill, CAL FIRE would be tasked with evaluating and reporting on the success of the project within 60 days of completion.
The bill was re-referred to the Assembly Committee on Privacy and Consumer Protection April 8, having been approved by the Committee on Emergency Management.
AB 1351 — Pupil Work Permit Database (Ahrens)
This bill outlines a new requirement that the Department of Education deploy a new database on or before Dec. 31, 2029, to track the work permits issued to students. The system, which would be called the Youth Employment System, would allow authorized individuals to upload the work permits they issue to students as well as inspect existing permits.
It's unclear from the legislation whether this new system would be built in-house or provided to the Department of Education through the procurement process.
The bill was sent to the Committee on Education in March, where it awaits a hearing.
SB 223 — Wildfire Smoke and Health Outcomes Data Act (Alvarado-Gil)
Senate Bill 223 grapples with the aftermath of California’s wildfire epidemic, specifically where the wildfire smoke and public health intersect. This legislation would mandate the creation and maintenance of a new data platform to “integrate wildfire smoke and health data from multiple databases” by July 1, 2028. This undertaking would be led by the Department of Public Health, with the assistance of CAL FIRE and the Wildfire and Forest Resilience Task Force.
It's unclear at this stage whether such a platform would be developed in-house or with the help of industry partners. As of April 9, the bill was re-referred to the Senate Committee on Natural Resources and Water after being approved by the committees on Health and Rules.
SB 320 — Firearms Do-Not-Sell List (Limón)
Senate Bill 320 takes a new approach to tracking who can and cannot purchase a firearm with a “process” — listed as a “system” in earlier drafts of the legislation — that would allow otherwise eligible individuals to add their information to a Department of Justice (DOJ) “do-not-sell” list. Existing law has already established that certain individuals — such as felons, those subject to restraining orders, and others — are prohibited from purchasing firearms. This new list would be voluntary.
If successful, the bill would require the department to develop this process and associated technology by Nov. 1, 2027. It would also require local law enforcement agencies to accept these requests from individuals before sending them to the Department of Justice. It’s unclear what sort of mechanism would be used to facilitate the list and communications between agencies and the DOJ.
The bill was most recently re-referred to the Committee on Judiciary April 9.
With Legs, These Bills Could Mean New IT Opportunities
Lawmakers have been busily introducing new legislation this session that could bring new requirements and opportunities for agencies and industry. Here are just a few of them.
