Legacy Core
Passed One Chamber — Not final law

California bill would rewrite privacy rules for insurance licensees and their vendors

This is a bill, not current law. SB 354 would revise California's Insurance Information and Privacy Protection Act for insurance licensees and third-party service providers. On August 13, 2026 Assembly Appropriations passed it as amended, so the operative text is the amended version.

Official source
California Legislative Information
Jurisdiction
California
Publication date
August 13, 2026
Legacy Core review
August 17, 2026 · Christopher Green
Source checked
August 17, 2026
Affected sectors
Insurance, Financial Services, General Professional Services

Summary

This is a bill, not current law. SB 354 would revise California's Insurance Information and Privacy Protection Act for insurance licensees and third-party service providers. On August 13, 2026 Assembly Appropriations passed it as amended, so the operative text is the amended version.

Why it matters

Insurance agencies have historically followed sector-specific privacy rules. This bill would change that baseline, including duties that can flow to vendors handling quoting, claims, marketing, or IT. Because it was just amended, the final scope and dates can still change.

Recommended action

Do not treat the bill as enacted. Read the August 13, 2026 amended text on the California Legislature site. If you hold an insurance license, review with qualified counsel which provisions would apply to your agency and to vendors that touch policyholder data.

California bill would rewrite privacy rules for insurance licensees and their vendors — Legacy Core Intelligence | Legacy Core