Skip to main content
CivicGate

AB 1159 CA
Passed One Chamber

Student personal information.

CA · session 20252026 · Assembly / House · bill

A state bill is a proposed law in a state legislature — separate from the U.S. Congress. Learn more →

Introduced Feb 20, 2025

Latest action (Jul 22, 2026) In committee: Hearing postponed by committee.

Summary

California Assembly Bill 1159 expands student data protection laws and creates new protections for higher education students. The bill strengthens existing K-12 and early learning student data protection laws and prohibits operators of educational websites and apps from using student personal information, including unique identifiers, to train artificial intelligence systems. The bill also creates the Higher Education Student Information Protection Act (HESIPA) to protect college student data, effective July 1, 2027. Students harmed by noncompliance can bring civil lawsuits against operators violating these protections.

AI-generated plain-language summary of the bill (from the OpenStates abstract — no full text available yet) — neutral, and may be imperfect.

Official abstract

Existing law, the K–12 Pupil Online Personal Information Protection Act (KOPIPA) , generally protects the personal information of a student enrolled in a K–12 course of instruction, defined as a "pupil," by prescribing requirements and prohibitions applicable to an operator of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used primarily for K–12 school purposes and was designed and marketed for K–12 school purposes. Existing law, the Early Learning Personal Information Protection Act (ELPIPA) , generally protects the personal information of a child enrolled in a preschool or prekindergarten course of instruction, defined as a "pupil," by prescribing requirements and prohibitions applicable to an operator of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used primarily for preschool or prekindergarten purposes and was designed and marketed for preschool and prekindergarten purposes. This bill would instead apply the provisions of KOPIPA and ELPIPA to an operator, or an entity working on behalf of the operator, of an internet website, online service, online application, or mobile application with actual knowledge that the site, service, or application is used for the applicable school purposes and was designed or marketed for those purposes, as specified. The bill would, among other changes to KOPIPA and ELPIPA related to protecting the personal information of students, prohibit an operator from using covered information, as defined, including persistent unique identifiers, created or gathered by the operator's site, service, or application to train a generative artificial intelligence system or service or develop an artificial intelligence system. This bill would also enact the Higher Education Student Information Protection Act (HESIPA) , which would generally protect the personal information of a student enrolled in a higher education institution, as defined, in a similar manner as KOPIPA and ELPIPA. The bill would make HESIPA operative on July 1, 2027. This bill would authorize a pupil or student actually harmed by the noncompliance with KOPIPA, ELPIPA, or HESIPA to bring a civil action against the noncompliant operator, as prescribed.

Sponsor (1)

  • Addis Democratic · author

Action history (25)

  1. Feb 20, 2025 Read first time. To print. · lower
  2. Feb 21, 2025 From printer. May be heard in committee March 23. · lower
  3. Mar 24, 2025 Referred to Coms. on P. & C.P. and JUD. · lower
  4. Mar 24, 2025 From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended. · lower
  5. Mar 25, 2025 Re-referred to Com. on P. & C.P. · lower
  6. Apr 8, 2025 In committee: Set, first hearing. Hearing canceled at the request of author. · lower
  7. Jan 5, 2026 In committee: Hearing postponed by committee. · lower
  8. Jan 5, 2026 From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended. · lower
  9. Jan 6, 2026 Re-referred to Com. on P. & C.P. · lower
  10. Jan 8, 2026 Assembly Rule 56 suspended. (Page 3717.) · lower
  11. Jan 8, 2026 (Pending re-refer to Com. on JUD.) · lower
  12. Jan 13, 2026 From committee: Do pass and re-refer to Com. on JUD. (Ayes 11. Noes 2.) (January 13). Re-referred to Com. on JUD. · lower
  13. Jan 15, 2026 From committee: Amend, and do pass as amended and re-refer to Com. on APPR. (Ayes 10. Noes 2.) (January 15). · lower
  14. Jan 16, 2026 Read second time and amended. · lower
  15. Jan 20, 2026 Re-referred to Com. on APPR. · lower
  16. Jan 22, 2026 Assembly Rule 63 suspended. (Page 3806.) · lower
  17. Jan 22, 2026 In committee: Set, first hearing. Referred to suspense file. · lower
  18. Jan 22, 2026 From committee: Do pass. (Ayes 14. Noes 1.) (January 22). · lower
  19. Jan 22, 2026 Read second time. Ordered to third reading. · lower
  20. Jan 26, 2026 Read third time. Passed. Ordered to the Senate. (Ayes 65. Noes 5. Page 3835.) · lower
  21. Jan 27, 2026 In Senate. Read first time. To Com. on RLS. for assignment. · upper
  22. May 20, 2026 Referred to Coms. on ED. and P., D.T., & C.P. · upper
  23. Jun 10, 2026 From committee: Do pass and re-refer to Com. on P., D.T., & C.P. (Ayes 4. Noes 0.) (June 10). Re-referred to Com. on P., D.T., & C.P. · upper
  24. Jun 23, 2026 From committee: Do pass and re-refer to Com. on APPR. (Ayes 7. Noes 0.) (June 22). Re-referred to Com. on APPR. · upper
  25. Jul 22, 2026 In committee: Hearing postponed by committee. · upper
Subjects
Studentpersonalinformation

Full text

The full text hasn’t been imported yet. CivicGate fetches it from the state legislature’s published version documents — check now.

Comments

Comments

Loading comments…

Data from OpenStates. View on OpenStates →