TrackersReportsPricingSecurity
Sign InBrowse all trackersStart Free Trial

Cybersecurity laws and bills in California

Every bill in the California Legislature that falls inside the Cybersecurity Legislation Tracker's scope, with where each one currently stands.

9

Bills in Scope

7

Past Committee

19 September 2026

Most Recent Action

Cybersecurity laws enacted in California in 2026

2 Cybersecurity bills were enacted in California this year, the latest with a last action on 19 September 2026. Each links to the California Legislature's own page.

  • AB 2281Office of Elections Cybersecurity.19 September 2026
  • AB 2298Pupil instruction: computer science: content standards.10 September 2026

Cybersecurity bills in California

5Enacted

2Past committee

2Introduced or inactive

9 bills in scope

Enacted

5

AB 2281Office of Elections Cybersecurity.EnactedAB 2298Pupil instruction: computer science: content standards.EnactedAB 979California Cybersecurity Integration Center: artificial intelligence.EnactedSB 446Data breaches: customer notification.EnactedAB 370California Public Records Act: cyberattacks.Enacted

Past committee

2

SB 833Critical infrastructure: artificial intelligence systems: human oversight.Passed chamberAB 869State agencies: information security: Zero Trust architecture.Passed chamber

Introduced or inactive

2

AB 2265Emergency services: law enforcement and intelligence: state threat assessment center.IntroducedSB 468High-risk artificial intelligence systems: duty to protect personal information.Dead

Bill titles link to the California Legislature's own page.

Coverage depth varies by jurisdiction. How this is measured, and where it is thinner.

What's In Scope

How Cybersecurity Legislation bills are selected

In scope is any bill imposing security duties on an identifiable party: incident notification to a regulator or an affected person, written information security programs and reasonable security standards, ransomware payment restrictions and disclosure, vendor and supply chain requirements, and the treatment of industrial control systems and supervisory control and data acquisition systems.

Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.

Other practice areas in California

Cybersecurity legislation in other jurisdictions

49 more currently hold bills in this tracker

California is one of Cybersecurity Legislation's jurisdictions

The tracker follows this subject everywhere it is legislated, and publishes a monthly issue on what moved across all of them.

About the Cybersecurity Legislation TrackerSee pricing