Civil Code 1798.14

Each agency shall maintain in its records only personal information which is relevant and necessary to accomplish a purpose of the agency required or authorized by the California Constitution or statute or mandated by the federal government.

Civil Code 1798.16 (1977; amended 1998, 1999)

An agency that collects personal information, including electronically, must maintain the source(s) in accessible form to the data subject unless the source is the data subject or she or he has received a copy of the source document.

Civil Code 1798.16 (1977; amended by AB 724, 1999)

An agency that collects personal information, including electronically, must maintain the source(s) in accessible form that can be provided to the data subject; unless 1) the source is the data subject, or 2) he or she has received a copy of the source document, or 3) the data subject that has requested that the electronic information be discarded.

Civil Code 1798.17

Each agency that collects personal information shall provide the following notice: the name of the agency/division requesting the information; the contact information of the agency official responsible for the system of records and who shall, upon request, inform an individual regarding the location of his or her records and the categories of any persons who use the information in those records; the legal authority for the maintenance of the information; whether submission of such information is mandatory or voluntary; the consequences of not providing all or any part of the requested information; the purpose for which the information will be used; any known or foreseeable disclosures which may be made of the information; the individual's right of access to records containing personal information which are maintained by the agency.

Civil Code 1798.19 (1977; amended 1978, 1985)

Each agency with records of personal information shall apply requirements of the Information Practices Act to the records.

Civil Code 1798.20

Agencies must establish rules for persons involved in the design, development, operation, disclosure, or maintenance of records containing personal information. Agencies must instruct persons involved as to the established rules and the requirements of this chapter.

Civil Code 1798.23

The Department of Justice shall review all personal information maintained by an agency to determine whether it should still be exempt from access.

Civil Code 1798.24(a)-(b) (1977; amended by SB 2, 2009)

An agency may disclose personal information in the following ways: to the individual to whom the information pertains; with the prior written voluntary consent of the individual to whom the record pertains if consent is obtained not more than 30 days before the disclosure, or in the time limit agreed to by the individual in the written consent.

Civil Code 1798.24(c) (1977; amended by SB 2, 2009)

An agency may disclose personal information to the duly appointed guardian or conservator of the individual or a person representing the individual if it can be proven with reasonable certainty through the possession of agency forms, documents or correspondence that this person is the authorized representative of the individual to whom the information pertains.

Civil Code 1798.24(d) (1977; amended by SB 2, 2009)

An agency may disclose personal information to the officers, employees, attorneys, agents, or volunteers of the agency that has custody of the information if the disclosure is relevant and necessary in the ordinary course of the performance of their official duties and is related to the purpose for which the information was acquired.