The California Legislature has passed Assembly Bill 713, which amends the California Consumer Privacy Act.

Although the bill, passed on September 5, has the primary and helpful effect of largely exempting US Health Insurance Portability and Accountability Act deidentified information from the CCPA, AB 713 also regulates deidentified information in a novel way that departs from the mostly hands-off approach to such datasets adopted by federal and state regulators. As has been the case with many of the CCPA’s heavily negotiated compromises, the bill will require affected entities to update both their privacy policies and contracts.

Learn more about the outcomes of the bill’s passage in our recent Data Protection, Privacy and Security Alert here.