SB 1121, which was passed by the California legislature, amends the California Consumer Privacy Act (CCPA) and contains a few substantive changes. These include a revision to the definition of personal information and several exemptions, such as HIPAA covered entities and health care providers; HIPAA business associates with respect to protected health information governed by HIPAA; data collected from clinical trials; and personal information collected, processed, sold or disclosed under the Gramm-Leach Bliley Act (GLBA) and the Drivers Privacy Protection Act (DPPA).
