Privacy Policy

DATED 2017-05-23 · VERSION 20260729_rev01 · COMPARED WITH 20240930_rev01

Full text changes — 20240930_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Effective 5/23/17
+Effective Date: 05/23/2017
+The California Department of Technology, which runs CA.gov, is committed to promoting and protecting the privacy rights of individuals, as enumerated in Article 1 of the California Constitution, the Information Practices Act of 1977, and other state and federal laws.
+Last Reviewed Date: 2/11/2026
+It is the policy of the Department of Technology to limit the collection and safeguard the privacy of personal information collected or maintained by the Department. The Department of Technology's information management practices conform to the requirements of the Information Practices Act (Civil Code Section 1798 et seq.), the Public Records Act (Government Code Section 6250 et seq.), Government Code Sections 11015.5 and 11019.9, and other applicable laws pertaining to information privacy. This Privacy Policy only applies to the CA.gov website run by the Department of Technology.
+Last Revision Date: 2/11/2026
+"Personal information" is information about a natural person that identifies or describes an individual, including, but not limited to, his or her name, social security number, physical description, home address, home telephone number, education, financial matters, and medical or employment history, readily identifiable to that specific individual. A domain name or Internet Protocol address is not considered personal information; however, it is considered "electronically collected personal information."
+The State of California (State) is committed to promoting and protecting the privacy rights of individuals, as enumerated in Article 1 of the California Constitution and other Laws. It is the policy of the State to limit the collection and safeguard the privacy of Personal Information and Electronically Collected Personal Information (as defined below) that may be collected through CA.gov. CA.gov is maintained by the California Department of Technology (CDT), which was established by Government Code sections 11545-11548.
+According to Government Code § 11015.5, "electronically collected personal information" means any information that is maintained by an agency that identifies or describes an individual user, including, but not limited to, his or her name, social security number, physical description, home address, home telephone number, education, financial matters, medical or employment history, password, electronic mail address, and information that reveals any network location or identity, but excludes any information manually submitted to a State agency by a user, whether electronically or in written form, and information on or relating to individuals who are users, serving in a business capacity, including, but not limited to, business owners, officers, or principals of that business.
+This Privacy Policy only applies to CA.gov website.
+"Electronically collected personal information" that we automatically collect includes your domain name or Internet Protocol address, and statistical information about which web pages you visit. If you voluntarily participate in an activity that asks for specific information (i.e., completing a request for assistance, personalizing the content of the website, sending an e-mail, or participating in a survey) more detailed data will be collected. If you choose not to participate in these activities, your choice will in no way affect your ability to use any other feature of the website.
+## Applicable Laws
+If any type of personal information is requested on the website or volunteered by the users, it is governed by state law, including California Civil Code section 1798 et seq., Government Code 11015.5, the California Public Records Act, and the Federal Privacy Act. This information may become a public record once it is provided and except for electronically collected information, it may be subject to public inspection and copying if not otherwise protected by federal or state law.
+CA.gov's information management practices conform to the requirements of the Information Practices Act (Civ. Code §§1798 et seq.), the Public Records Act (Govt. Code §§7920.000 et seq.), Government Code sections 11015.5 and 11019.9, and other applicable state and federal laws (e.g., Federal Privacy Act (5 U.S.C. § 552a)) pertaining to information privacy (Laws).
+The Department of Technology adheres to the following principles in connection with the collection and management of personal information:
+If any type of Personal Information or Electronically Collected Personal Information (as defined below) is requested on the CA.gov website or volunteered by the users, then this information will be governed by Laws. This information may become a public record once it is provided. To the extent required or permitted by law, certain public records may be subject to public inspection and disclosure. Personal Information is protected from disclosure except as authorized by law as set forth in Section 2 below.
+. The Department of Technology collects personal information on individuals only as allowed by law. The Department limits the collection of personal information to what is relevant and necessary to accomplish its lawful purpose. For example, the Department may need to know an individual's e-mail address or telephone number in order to answer the individual's questions or in order to provide requested assistance.
+. The Department of Technology does not collect home, business or e-mail addresses, or account information from persons who simply browse the CA.gov website. Personal information about individuals is collected through this website only if an individual provides such information to the Department voluntarily through e-mail, registration forms, or surveys, for example. This information will be used to facilitate in responding to the person or improve the content or navigation of the website or provide survey information to users. The information collected in this manner is not subject to requests made pursuant to the Public Records Act, and site visitors may request to have their information discarded without reuse or distribution.
+. The Department of Technology uses Google Analytics to help improve the website. Google tracking cookies may be used to provide information to Google Analytics. Our website may use Google Analytics to track website statistics. Google tracking code used by every website or application that employs Google Analytics, stores information that identifies device IP addresses, but our website is anonymizing that information and only part of device IP addresses are being used. Consequently, no information identifying you or your device is being stored at Google via our utilization of Google Analytics implementation. [You can find out more about Google Analytics anonymized IP addresses by clicking here.](https://support.google.com/analytics/answer/2763052)
+. The Department of Technology's use of your e-mail. You may choose to provide us with personal information, as in e-mail with a comment or question. We use the information to improve our service to you or to respond to your request. Sometimes we forward your e-mail to other State employees who may be better able to help you, and this staff may be employed by a different agency within the State. Except for authorized law enforcement investigations or, as required by law, we do not share our e-mail with any other organizations. We use your e-mail to respond appropriately. This may be to respond to you, to address issues you identify, to further improve our website, or to forward the e-mail to another agency for appropriate action. Submission of an email to the Department, the Department staff and/or communication through the website does not create any attorney-client or other privileged or confidential relationship. Accordingly, do not disclose any information to the Department that you wish to remain private or confidential.
+. The Department of Technology provides people who provide personal information with an opportunity to review that information. Individuals, who provide personal information, are allowed to review the information and contest its accuracy or completeness.
+. The Department of Technology uses personal information only as specified and consistent with those purposes; unless the Department obtains the consent of the subject of the information, or as required or allowed by law. The Public Records Act exists to ensure that California government is open and that the public has a right to have access to appropriate records and information possessed by many state and local government agencies. At the same time, there are exceptions that recognize the public's right to access records. These exceptions serve various needs, including maintaining the privacy of individuals. In the event of a conflict between this Policy and the Public Records Act, the Information Practices Act or other law governing the disclosure of records, the applicable law will control.
+. How the Department of Technology collects and uses your information. We do collect personal information directly from individuals who volunteer to use some of our services. Collection of this information is required to deliver the specific services, but use of these services is voluntary.
+. How the Department of Technology protects your information. The Department, as developer and manager of this website, has taken several steps to safeguard the integrity of its telecommunications and computing infrastructure, including but not limited to authentication, monitoring, auditing. Security measures have been integrated into the design, implementation, and day-to-day practices of the entire State operating environment as part of its continuing commitment to risk management. This information should not be construed in any way as giving business, legal, or other advice, or warranting as fail proof, the security of information provided via the Department's supported website. The technical standards governing security are enforced by the Department of Finance.
+## Definitions of Personal Information and Electronically Collected Personal Information
+If you do nothing during your visit to the website but browse or download information, we automatically collect and store the following information about your visit:
+**"Personal Information"** means any information that is maintained by an agency that identifies or describes an individual, including, but not limited to, the individual's name, social security number, physical description, home address, home telephone number, education, financial matters, and medical or employment history. It includes statements made by, or attributed to, the individual. (Civ. Code §1798.3(a)).
+. A partial Internet Protocol address and domain name is collected, but not the e-mail address. The partial Internet Protocol address is used to direct Internet traffic to you without identifying you individually and generate statistics used in the management of this website;
+. The type of browser and operating system you used;
+. The city and zip code you used it from;
+. The date and time you visited this website;
+. The web pages or services you accessed at this website;
+. The website you visited prior to coming to this website;
+. The website you visit as you leave this website, and;
+. If you downloaded a form, the form that was downloaded.
+**"Electronically Collected Personal Information"** means any information that is maintained by an agency that identifies or describes an individual user, including, but not limited to, the user's name, social security number, physical description, home address, home telephone number, education, password, electronic mail address, and information that reveals any network location or identity, but excludes any information manually submitted to a state agency by a user, whether electronically or in written form, and information on or relating to individuals who are users, serving in a business capacity, including, but not limited to, business owners, officers, or principals of that business. (Gov't Code § 11015.5(d)(1)).
+The information we automatically collect or store is used to improve the content of our web services and to help us understand how people are using our services. This information does not identify you personally and is used for gathering website statistics. The information we automatically collect and store in our logs about your visit helps us to analyze our website to continually improve the value of the materials available. Our website logs do not identify a visitor by personal information, and we make no attempt to link other websites with the individuals that browse our website. Individuals have the right to have any electronically collected personal information deleted by the Department, without reuse or distribution. Individuals may request to have their electronically collected personal information deleted via the contact form reachable from the "Contact Us" link at the top and bottom of each page.
+## Collection and Management of Personal Information
+Electronically collected personal information is exempt from requests made under the Public Records Act.
+CA.gov website will not collect any Personal Information about you other than statistical information that can be used to make the website more effective. In the event that Personal Information is requested on CA.gov or volunteered by the users, CDT, in managing the CA.gov website, will adhere to the following principles in relation to the collection, use and management of Personal Information:
+Government Code § 11015.5 prohibits all state agencies from distributing or selling any electronically collected personal information, as defined above, about users to any third party without the permission of the user. The Department does not sell any "electronically collected personal information." Any distribution of "electronically collected personal information" will be solely for the purposes for which it was provided to us.
+. Collection of Personal Information is limited to what is relevant and necessary to accomplish its lawful purpose, which is enumerated at or prior to the time of collection, in a privacy notice included on or with the form used to collect Personal Information. For example, CA.gov may ask for an individual's e-mail address or telephone number to respond to the individual's questions or to direct them to the requested assistance.
+. CA.gov does not collect home, business, or e-mail addresses or account information from persons who simply browse the CA.gov website. Personal Information about individuals is collected through this website only if an individual provides such information on CA.gov voluntarily through e-mail, registration forms, or surveys. The Personal Information collected in this manner is protected under the Laws but records may be disclosed only when required or permitted by such Laws.
+. Google Analytics are used to help improve the website. Google tracking cookies may be used to provide information to Google Analytics to track website statistics. Google tracking code used by every website or application that employs Google Analytics stores information that identifies device IP addresses, but the CA.gov website is anonymizing that information and only part of device IP addresses are being used. Consequently, no information identifying you or your device is being stored at Google via our utilization of Google Analytics implementation. You can find out more about Google Analytics anonymized IP addresses by [clicking here](https://support.google.com/analytics/answer/2763052). You can find out more about Google tracking cookies such as the length of time the cookies may remain on your device, or how to remove or manage the Google tracking cookies, by [clicking here](https://support.google.com/analytics/answer/2763052).
+. You may choose to provide your Personal Information on CA.gov , as an e-mail address, with a comment or question. This Personal Information is used to improve CA.gov's service to you or to respond to your request. Sometimes your e-mail may be forwarded to other State personnel who may be better able to help you, and these personnel may be working for a different agency within the State. Except for authorized law enforcement investigations or as required by law, your e-mail will not be shared with any other organizations. Submission of an email to CA.gov or CDT personnel, or communication through the website does not create any attorney-client or other privileged or confidential relationship. Accordingly, do not disclose any information to CA.gov, CDT, or other State personnel that you wish to remain private or confidential.
+. Use and disclosure of Personal Information will be only as specified and consistent with those purposes enumerated at or before the collection of the Personal Information; unless the individual's consent is obtained; or as required or allowed by law. However, Public Records Act (Gov. Code §§ 7920.000 et seq.) exists to ensure that California government is open, and that the public has a right to have access to appropriate records and information possessed by many state and local government agencies. The Public Records Act does include specific exceptions to protect privacy and other legally protected interests. As such, records containing Personal Information may be disclosed only as required or permitted by law and consistent with these exemptions. In the event of a conflict between this Privacy Policy, and the Public Records Act (Gov. Code §§ 7920.000 et seq.), the Information Practices Act (CA Civil Code §§ section 1798 et seq.) or any other applicable state or federal law governing the use or disclosure of records, the applicable law will control.
+. Personal Information is collected directly from individuals who volunteer to use some of our services. The collection of Personal Information may be required to deliver specific services, but the use of these services is voluntary.
+. Several steps have been taken to protect your Personal Information against loss, unauthorized access, use, modification, or disclosure. CDT, as developer and manager of CA.gov website has taken several steps to safeguard the integrity of its telecommunications and computing infrastructure, including but not limited to authentication, monitoring, and auditing. Security measures have been integrated into the design, implementation, and day-to-day practices of the entire state operating environment as part of its continuing commitment to risk management. This information should not be construed in any way as giving business, legal, or other advice, or warranting as fail proof the security measures protecting information provided via CA.gov website. The technical standards governing security are enforced by CDT.
+. Electronically Collected Personal Information about users will not be distributed or sold to any third party without prior written permission from the user except as set forth in Government Code section 11015.5(b). Moreover, any distribution of Electronically Collected Personal Information will be solely for the purposes for which it was provided to us. Certain lists and statistical reports of regulatory information may be provided or distributed as required by law, but no Personal Information is sold or distributed, and all relevant legal protections still apply to the website.
+. CA.gov website automatically collects certain electronic information of users or visitors to the website through browser cookies, hardware or other methods. If you do nothing during your visit to CA.gov but browse or download information, the following information is automatically collected and stored about your visit:
+. A partial IP address and domain name is collected, but not the e-mail address. The IP address is used to direct Internet traffic to you without identifying you individually and generate statistics used in the management of this website.
+. The type of browser and operating system you used.
+. The city and zip code you used it from.
+. The date and time you visited this website.
+. The web pages or services you accessed at this website (e.g., downloads, navigation).
+. The website you visited prior to coming to this website.
+. The website you visit as you leave this website.
+. If you downloaded a form, the form that was downloaded.
+. If you complete a form or survey on CA.gov, the form or survey you completed.
+. If you click on a linked external website, the external website you clicked on.
+. Website cookies (e.g., tracking, session, or analytic cookies).
+. Website analytics (e.g., Google analytics or similar tools).If you voluntarily participate in an activity that asks for specific electronic information (e.g., completing a request for assistance, personalizing the content of the website, sending an e-mail, completing a form, or participating in a survey) more detailed data will be collected. If you choose not to participate in these activities, your choice will in no way affect your ability to use any other feature of the website.
+. The electronic information we automatically collect, or store, or the Personal Information you provide us will be used to: (1) facilitate a response to you, (2) improve the content or navigation of the website, (3) provide survey information to you, (4) gather website statistics and (5) helps us analyze our website to continually improve the value of the materials available. CA.gov website logs do not identify a visitor by Personal Information, and no attempt is made to link other websites with the individuals that browse CA.gov website.
+. Individuals who provide Personal Information to CA.gov or CDT personnel have the right to request: access to their Personal Information, deletion of their Personal Information, correction of any inaccuracies or incompleteness to their Personal Information, or that their Electronically Collected Personal Information be discarded without reuse or distribution. (Govt. Code § 11015.5). To make this request, use the contact information listed below.
+The Department may provide or distribute certain lists and statistical reports of regulatory information as provided by law, but no personal information is sold or distributed, and all relevant legal protections still apply to the website.
+## Linking Policy
+The Department will provide additional explanations of this privacy policy, if requested. If any individuals have any further questions about this privacy policy, they are encouraged to contact the Department via email, by phone at (916) 319-9223, or by mail to:
+CA.gov website contains links to information created and maintained by other public organizations. These links are provided solely for your information and convenience. If you select a link to those websites, you're leaving the CA.gov website and are subject to the privacy and security policies of that respective website.
+California Department of Technology
+J Street, Suite 1600
+Sacramento, CA 95814
+- * *
+**
+The CA.gov privacy policy prior to 5/23/17 was as follows:**
+## Contact Us
+For details regarding CA.gov Privacy Policy, please see our Conditions of Use. The text below reflects general requirements for State departments.
+If you have any further questions about this Privacy Policy, please contact CDT via email [privacy@state.ca.gov](mailto:privacy@state.ca.gov), by phone at (916) 319-9223, or by mail to:
+Pursuant to Government Code Section 11019.9, all departments and agencies of the State of California shall enact and maintain a permanent privacy policy, in adherence with the Information Practices Act of 1977 (Civil Code Section 1798 et seq.), that includes, but not necessarily limited to, the following principles:
+(a) Personally identifiable information may only be obtained through lawful means.
+(b) The purposes for which personally identifiable data are collected shall be specified at or prior to the time of collection, and any subsequent use of the data shall be limited to and consistent with the fulfillment of those purposes previously specified.
+(c) Personal data may not be disclosed, made available, or otherwise used for a purpose other than those specified, except with the consent of the subject of the data, or as required by law or regulation.
+(d) Personal data collected shall be relevant to the purpose for which it is needed.
+(e) The general means by which personal data is protected against loss, unauthorized access, use, modification, or disclosure shall be posted, unless the disclosure of those general means would compromise legitimate agency objectives or law enforcement purposes.
+Each department shall implement this privacy policy by:
+- Designating which position within the department or agency is responsible for the implementation of and adherence to this privacy policy;
+- Prominently posting the policy physically in its offices and on its Internet website, if any;
+- Distributing the policy to each of its employees and contractors who have access to personal data;
+- Complying with the Information Practices Act (Civil Code Section 1798 et seq.), the Public Records Act (Government Code Section 6250 et seq.), Government Code Section 11015.5, and all other laws pertaining to information privacy, and
+- Using appropriate means to successfully implement and adhere to this privacy policy.
+California Department of Technology
+PO Box 1810
+Rancho Cordova, CA 95741
+Attn: Office of Legal Services/Privacy Coordinator