On July 19, 2012, California Attorney General Kamala D. Harris announced the creation of a new Privacy Enforcement and Protection Unit (Privacy Unit). This measure is seen as yet another step to position California as one of the most active enforcers of consumer privacy rights.
The privacy unit has a broad mission focused on protecting consumer and individual privacy for California citizens. Notably, the state's constitution guarantees all citizens the inalienable right to privacy, and the Privacy Unit will protect this right through the civil prosecution of state and federal privacy laws. According to Attorney General Harris, "the Privacy Unit will police the privacy practices of individuals and organizations to hold accountable those who misuse technology to invade the privacy of others."1
The Privacy Unit will enforce laws regulating the collection, retention, disclosure, and destruction of private or sensitive information by individuals, organizations, and the government. In addition to online privacy regulation, the Privacy Unit will investigate data breaches, identity theft, and violations of offline health, financial, and government privacy regulations.
The Privacy Unit will be staffed by California Department of Justice employees, including six dedicated prosecutors. It will be organized under the state's eCrime Unit, which is charged with identifying and prosecuting technology crimes, including identity theft, fraud committed using the Internet, theft of computer components and service, intellectual property crimes (such as counterfeiting or piracy), and child exploitation using the Internet.4 Joanne McNabb, formerly of the California Office of Privacy Protection and a nationally recognized leader in the privacy field, will serve as the Director of Privacy Education and Policy, and will oversee the Privacy Unit's education and outreach efforts.
Companies that collect and use information from or about California residents should be particularly alert to policy developments and enforcement actions taken by this new Privacy Unit. For additional information on this topic or related matters, please contact Lydia Parnes, Seth Silber, Valentina Rucker, or another member of Wilson Sonsini Goodrich & Rosati's privacy and data security practice.