California Governor Newsom Vetoed Data Privacy Bill

Governor Gavin Newsom rejected legislation that would have restricted the sale of sensitive consumer data.

Updated on Sept. 29, 2026 in Cybersecurity

Bold flat-color editorial illustration featuring a monolithic stone plinth, symbolizing the institutional weight of state regulatory policy.
Governor Gavin Newsom vetoed a California bill that would have restricted the sale of consumer biometric and geolocation data, citing overbroad regulatory rules. AI Illustration. Upload story photo >

Live Poll

Should states impose stricter bans on the sale of consumer geolocation and biometric data?

Governor Gavin Newsom vetoed a bill intended to limit the sale and sharing of sensitive consumer geolocation and biometric information. The governor rejected the proposal, characterizing the measure as an overly broad ban.

Why it matters

The veto prevents new restrictions on how private entities handle highly personal consumer data in California. Newsom described the legislation as a step too far for state regulatory policy.

The legislation focused on limiting the commercial sale and sharing of specific digital metrics including geolocation tracking and biometric markers. The proposal sought a categorical prohibition on these data transfers.

The players

Gavin Newsom

He is the current Governor of California who holds the authority to sign or veto state legislation.

The details

The bill aimed to impose strict limitations on the commercial exchange of highly sensitive personal data. Governor Newsom exercised his executive authority to block the measure, citing concerns that the proposed rules were too restrictive.

Timeline

  1. September 28, 2026: Governor Newsom officially vetoed the data privacy legislation.

The Tech Race

This veto highlights the ongoing tension between aggressive data privacy legislation and commercial flexibility within the digital economy. It marks a departure from the regulatory trajectory set by the California Consumer Privacy Act, signaling a shift in the state's approach to data control.

Residents will continue to see their geolocation and biometric data handled under existing state standards rather than the proposed stricter framework. This ensures that current business models for data-dependent services remain unchanged by the vetoed rules.

The takeaway

The governor's decision maintains the current landscape for digital data commerce in California. Consumers should remain aware of how their service providers disclose data sharing practices through existing privacy notices.

Further reading

Find more updates on the state's regulatory environment in California Cybersecurity.

Source note: This article includes information reported by Law360.

Live Poll

Should states impose stricter bans on the sale of consumer geolocation and biometric data?