Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit an entity or organization that operates a specified nonschool youth program from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, for communications, marketing, or other purpose that exposes that information to the public unless the entity or organization obtains the parent or guardians express written consent on a specified notice. The bill would prohibit the entity or organization from making a youths enrollment or participation in the program contingent upon a parent or guardian consenting to the programs use of the youths information for any communications, marketing, or other purpose that exposes that information to the public. The bill would authorize a parent or guardian to revoke consent, as specified.

This bill would authorize a parent or guardian to bring a civil action against an entity or organization for noncompliance with these provisions and would provide for specified remedies, including, among others, specified civil penalties per youth who has had the youths information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit an entity or organization that operates a specified nonschool youth program from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, for communications, marketing, or other purpose that exposes that information to the public unless the entity or organization obtains the parent or guardians express written consent on a specified notice. The bill would prohibit the entity or organization from making a youths enrollment or participation in the program contingent upon a parent or guardian consenting to the programs use of the youths information for any communications, marketing, or other purpose that exposes that information to the public. The bill would authorize a parent or guardian to revoke consent, as specified.

This bill would authorize a parent or guardian to bring a civil action against an entity or organization for noncompliance with these provisions and would provide for specified remedies, including, among others, specified civil penalties per youth who has had the youths information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit an entity or organization that operates a specified nonschool youth program from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, for communications, marketing, or other purpose that exposes that information to the public unless the entity or organization obtains the parent or guardians express written consent on a specified notice. The bill would prohibit the entity or organization from making a youths enrollment or participation in the program contingent upon a parent or guardian consenting to the programs use of the youths information for any communications, marketing, or other purpose that exposes that information to the public. The bill would authorize a parent or guardian to revoke consent, as specified.

This bill would authorize a parent or guardian to bring a civil action against an entity or organization for noncompliance with these provisions and would provide for specified remedies, including, among others, specified civil penalties per youth who has had the youths information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit an entity or organization that operates a specified nonschool youth programs program from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, for communications, marketing, educational, or training purposes unless the program obtains express written consent from the parent or guardian after providing specified notice, as provided. or other purpose that exposes that information to the public unless the entity or organization obtains the parent or guardians express written consent on a specified notice. The bill would prohibit the program entity or organization from making participation contingent upon providing consent or selling that youth information. a youths enrollment or participation in the program contingent upon a parent or guardian consenting to the programs use of the youths information for any communications, marketing, or other purpose that exposes that information to the public. The bill would authorize a parent or guardian to revoke consent at any time during the youths enrollment in the covered program and up to one year after the youth is no longer enrolled in the program, and would require a covered entity to remove that information from communications, marketing, educational, and training materials within 7 days of receiving a notice of consent revocation. consent, as specified.

This bill would authorize a parent or guardian to bring a civil action against a program an entity or organization for noncompliance with these provisions and would provide for specified remedies, including, among others, specified civil penalties per youth who has had their the youths information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit specified nonschool youth programs from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, except, as specified, for marketing purposes. In this regard, the bill would allow the program to use that information for marketing purposes only if for communications, marketing, educational, or training purposes unless the program obtains express written consent from the parent or guardian after providing specified notice, as provided. The bill would prohibit the program from making participation contingent upon providing consent, consent or selling or sharing that youth information, or using that youth information for any purpose other than the specific purpose for which consent was provided. information. The bill would authorize a parent or guardian to revoke consent at any time during the youths enrollment in the covered program and up to one year after the youth is no longer enrolled in the program, and would require a covered entity to remove that information from communications, marketing, educational, and training materials within 7 days of receiving a notice of consent revocation.

The bill would authorize a parent or guardian to bring a civil action against a program for noncompliance with these provisions and would provide for specified remedies, including, among others, up to $5,000 specified civil penalties per youth who has had their information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit specified nonschool youth programs from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, except, as specified, for marketing purposes. In this regard, the bill would allow the program to use that information for marketing purposes only if the program obtains express written consent from the parent or guardian after providing specified notice, as provided. The bill would prohibit the program from making participation contingent upon providing consent, selling or sharing that youth information, or using that youth information for any purpose other than the specific purpose for which consent was provided.

The bill would authorize a parent or guardian to bring a civil action against a program for noncompliance with these provisions and would provide for specified remedies, including, among others, up to $5,000 per youth who has had their information disclosed and injunctive or declaratory relief.

Existing law makes a person who knowingly uses anothers name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that persons prior consent, or, in the case of a minor, the prior consent of the persons parent or legal guardian, liable for damages, as specified, among other remedies, as prescribed. Existing law generally regulates organizations and businesses that provide athletic, instructional, or other services to minors by imposing disclosure, training, background check, and child abuse prevention requirements on those entities and their personnel.

This bill would prohibit specified nonschool youth programs from using certain identifying information of a youth, including their picture, video, audio recording, likeness, and attributed statements, except, as specified, for marketing purposes. In this regard, the bill would allow the program to use that information for marketing purposes only if the program obtains express written consent from the parent or guardian after providing specified notice, as provided. The bill would prohibit the program from making participation contingent upon providing consent, selling or sharing that youth information, or using that youth information for any purpose other than the specific purpose for which consent was provided.

The bill would authorize a parent or guardian to bring a civil action against a program for noncompliance with these provisions and would provide for specified remedies, including, among others, up to $5,000 per youth who has had their information disclosed and injunctive or declaratory relief.

CONCURRENCE IN SENATE AMENDMENTS

CSA1 Bill Id:AB 2007

Author:(Bauer-Kahan)

As Amended Ver:August 21, 2026

Majority vote

SUMMARY

This bill requires youth-focused programs, such as extracurricular and after-school programs, to obtain parental consent before using images of a child or other protected information in their communications, marketing, educational, or training materials, as specified.

Senate Amendments

Provides that a covered program must disclose only the types of websites, not the specific websites, on which covered information of an enrolled child may be published if the parent or guardian consents to the use of their child's information.

COMMENTS

Whether it is music lessons, drama classes, sports leagues, summer camps, or simply after-school programs, participating in enriching and fun group activities is an important part of children's educational, emotional, social, and physical development. Frequently, organizations providing these activities promote their programs through websites, social media, and advertising materials using images, videos, and stories featuring participating children and teens.

Enrollment applications and releases for these programs have shifted to electronic forms in recent years. Whereas printed forms typically allowed parents and guardians to cross out any releases that they did not agree to, electronic forms often do not allow the same flexibility – making it very difficult for parents and guardians to prevent organizations from using their children's images and other personally identifying information in marketing materials. Parents and guardians who, for a variety of reasons, avoid publicly posting images of their children and their whereabouts, have found that they cannot opt out through electronic forms that they have to fill out. This leaves parents with a choice of either waiving their child's right to privacy or not allowing their children to participate in the activity.

This bill proposes to address this problem by requiring organizations to offer a separate release for children's images and other personally identifying information that enables parents to affirmatively consent to waive their children's privacy. In addition, the bill prohibits organizations from limiting participation or refusing attendance to the children of parents who have opted out. Finally, the bill enables parents and guardians to bring a civil action against violators.

According to the Author

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor's participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child's information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child's privacy while maintaining transparency and trust between youth organizations and the families they serve.

Arguments in Support

The California Federation of Teachers (CFT) writes:

The CFT — A Union of Educators & Classified Professionals, AFT, AFL-CIO, writes in support of Assembly Bill 2007 (Bauer-Kahan) as it would mandate that nonschool youth programs must obtain explicit parental consent before using any identifying information of minors for marketing purposes.

Arguments in Opposition

None on file.

FISCAL COMMENTS

According to the Senate Appropriations Committee, the fiscal impact is as follows:

The bill creates a private right of action against a covered entity that violates the bill's requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent. Unknown, potentially significant costs to the courts to adjudicate civil enforcement actions. An eight-hour court day costs approximately $10,500 based on the hourly rate of court personnel including at minimum the judge, clerk, bailiff, court reporter, jury administrator, administrative staff, and jury per-diems. While the courts are not funded on a workload basis, an increase in workload could result in delayed court services and would put pressure on the General Fund to fund additional staff and resources. The fiscal year (FY) 2026-27 Budget appropriated $70 million General Fund for this purpose (Trial Court Trust Fund, General Fund).

VOTES:

ASM PRIVACY AND CONSUMER PROTECTION: 15-0-0

YES: Bauer-Kahan, Macedo, Bryan, DeMaio, Hoover, Irwin, Lowenthal, McKinnor, Ortega, Patterson, Pellerin, Petrie-Norris, Ward, Wicks, Wilson

ASM JUDICIARY: 12-0-0

YES: Kalra, Bauer-Kahan, Bryan, Connolly, Dixon, Harabedian, Johnson, Pacheco, Papan, Sanchez, Lee, Zbur

ASM APPROPRIATIONS: 15-0-0

YES: Wicks, Hoover, Aguiar-Curry, Calderon, Caloza, Dixon, Fong, Mark González, Krell, Pacheco, Pellerin, Sharp-Collins, Solache, Ta, Tangipa

ASSEMBLY FLOOR: 72-0-8

YES: Addis, Aguiar-Curry, Ahrens, Alanis, Alvarez, Ávila Farías, Bains, Bauer-Kahan, Bennett, Berman, Boerner, Bonta, Bryan, Calderon, Caloza, Carrillo, Castillo, Connolly, Davies, DeMaio, Dixon, Elhawary, Ellis, Flora, Fong, Gabriel, Gallagher, Gipson, Jeff Gonzalez, Mark González, Hadwick, Haney, Harabedian, Hart, Jackson, Johnson, Kalra, Krell, Lee, Lowenthal, Macedo, McKinnor, Muratsuchi, Nguyen, Ortega, Pacheco, Papan, Patel, Patterson, Pellerin, Petrie-Norris, Quirk-Silva, Ransom, Michelle Rodriguez, Rogers, Blanca Rubio, Sanchez, Schiavo, Schultz, Sharp-Collins, Solache, Soria, Stefani, Ta, Tangipa, Valencia, Wallis, Ward, Wicks, Wilson, Zbur, Rivas

ABS, ABST OR NV: Arambula, Chen, Garcia, Hoover, Irwin, Lackey, Ramos, Celeste Rodriguez

UPDATED

VERSION: August 21, 2026

CONSULTANT: Julie Salley / P. & C.P. / (916) 319-2200 FN: 0004334

 THIRD READING  

Bill No: AB 2007

Author: Bauer-Kahan (D), et al.

Amended: 8/21/26 in Senate

Vote: 21

SENATE JUDICIARY COMMITTEE: 13-0, 6/23/26

AYES: Umberg, Niello, Allen, Ashby, Caballero, Durazo, Laird, Reyes, Stern, Valladares, Wahab, Weber Pierson, Wiener

SENATE PRIV., DIGITAL TECH., & CONS. PROT. COMMITTEE: 7-0, 6/29/26

AYES: Cabaldon, Gonzalez, McNerney, Padilla, Reyes, Umberg, Wiener

NO VOTE RECORDED: Seyarto, Ochoa Bogh

SENATE APPROPRIATIONS COMMITTEE: 6-0, 8/13/26

AYES: Cervantes, Cabaldon, Dahle, Grayson, Richardson, Wahab

NO VOTE RECORDED: Seyarto

ASSEMBLY FLOOR: 72-0, 5/21/26 - See last page for vote

SUBJECT: Youth programs: identifying information of youth

SOURCE: Author

DIGEST:

This bill requires youth-focused programs, such as extracurricular and after-school programs, to obtain parental consent before using images of a child or other protected information in their communications, marketing, educational, or training materials, as specified.

Senate Floor Amendments of 8/21/26: provide that a covered program must disclose only the types of websites, not the specific websites, on which covered information of an enrolled child may be published if the parent or guardian consents to the use of their child’s information.

ANALYSIS:

Existing constitutional law provides that all people are, by nature, free and independent and have inalienable rights, including the fundamental right to privacy. (California Constitution (Cal. Const.), art. I, § 1.)

Existing state law:

1. States that the “right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution and that all individuals have a right of privacy in information pertaining to them,” and that the Legislature finds all of the following:
   1. The right to privacy is being threatened by the indiscriminate collection, maintenance, and dissemination of personal information and the lack of effective laws and legal remedies.
   2. The increasing use of computers and other sophisticated information technology has greatly magnified the potential risk to individual privacy that can occur from the maintenance of personal information.
   3. In order to protect the privacy of individuals, it is necessary that the maintenance and dissemination of personal information be subject to strict limits. (Civil [Civ.] Code, § 1798.1.)
2. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to businesses’ collection of their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on businesses to respect those rights. (Civ. Code, div. 3, pt. 4, tit. 1.81.5, §§ 1798.100 et seq.)
3. Defines “personal information” within the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably linked, directly, or indirectly, with a particular consumer or household, including the following:
   1. Identifiers such as a real name, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
   2. Characteristics of protected classifications under California or federal law.
   3. Commercial information, including property records and records of purchases.
   4. Biometric information.
   5. Internet or other electronic network activity information, including browser and search history.
   6. Geolocation data.
   7. Audio, electronic, visual, thermal, olfactory, or similar information. (Civ. Code, § 1798.140(v)(1).)
4. Excludes, from the definition of “personal information” within the CCPA:
   1. Publicly available information or lawfully obtained, truthful information that is a matter of public concern.
   2. Deidentified or aggregate consumer information. (Civ. Code, § 1798.140(v)(2) & (3).)
5. Prohibits a business from selling or sharing the personal information of a consumer if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of those who are between 13 and 16 years of age, or the consumer’s parent or guardian, in the case of a consumer who is less than 13 years of age, has affirmatively authorized the sale or sharing of the information. (Civ. Code, § 1798.120.)
6. Provides that any person who knowingly uses another’s name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that person’s prior consent, or, in the case of a minor, the prior consent of their parent or guardian, shall be liable for the following:
   1. Statutory damages of $750 per violation or the actual damages suffered by the person, whichever is greater.
   2. Any profits from the unauthorized use that are attributable to the use and are not taken into account in computing the actual damages.
   3. Punitive damages.
   4. Attorney’s fees and costs. (Civ. Code, § 3344(a).)
7. Provides that the use of a name, voice, signature, photograph, or likeness in a commercial medium shall not constitute a use for which consent is required under 6) solely because the material containing the use is commercially sponsored or contains paid advertising; rather, it shall be a question of fact as to whether or not the use of the name, voice, signature, photograph, or likeness was so directly connected with the commercial sponsorship or with the paid advertising as to constitute a use for which consent is required under 6). (Civ. Code, § 3344(f).)

This bill:

1. Defines the following relevant terms:
   1. “Covered entity” means an entity or organization that operates a covered program.
   2. “Covered program” means a program or activity, including, but not limited to, a program related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment or a day or overnight camp, that meets both of the below criteria, but excludes a business that is hosting or participating in a covered entity’s program, as specified:
      1. The program or activity requires a parent signature or consent form authorization, or the program or activity is an event in which a parent provides written authorization for an organization to act in loco parentis.
      2. The program or activity is offered primarily to youth outside of school hours, including periods when school is not in session, and is not operated by a public or private elementary or secondary school.
   3. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information as defined under the CCPA, or any other identifying information.
   4. “Marketing purposes” means promotions, newsletters, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
2. Prohibits a covered entity from making a youth’s enrollment or participation in a covered program contingent upon a parent or guardian consenting to the covered program’s use of the youth’s covered information for any communications, marketing, or other purpose that exposes that information to the public.
3. Prohibits a covered entity from using a youth’s covered information for communications, marketing, educational, or other purpose that exposes that information to the public unless the covered entity obtains the parent or guardian’s express written consent on a notice that complies with all of the following:
   1. The notice communicates the requested uses of the youth’s covered information clearly and meaningfully, including a description of any proposed use of the youth’s covered information, including a description of the types of materials or media in which the information may be used and a list of the types of internet websites on which the covered information may be published.
   2. The notice is contained in a single document or single page within an online form that is separate from enrollment forms, waivers of liability, and any other document.
   3. The notice includes, in clear and understandable language, that the parent or guardian is providing consent for use of the youth’s covered information for communications, marketing, or other purpose that exposes that information to the public as communicated in the required description.
   4. The notice includes, in clear and understandable language, that the parent or guardian may revoke consent at any time and clearly and conspicuously states that the youth’s enrollment or participation is not contingent upon consent.
   5. The notice provides an electronic mail address at which the parent or guardian can contact the covered program relating to the scope of consent, revocation of consent, or other issues relating to a youth’s covered materials.
4. Prohibits a covered entity from selling covered information of a youth for any reason, regardless of whether the parent or guardian provided consent to that use.
5. Permits a parent or guardian to revoke consent through the email address provided in 3)(e) at any time during the youth’s enrollment in the covered program and up to one year after the youth is no longer in the program.
6. Provides that a covered entity that receives a revocation of consent pursuant to 5) is not required to remove covered information from communications, marketing, educational, or training materials that were published or printed before receiving a notice revoking consent.
7. Permits a parent or guardian to bring a civil action in a court of competent jurisdiction against a covered entity for a violation of the section created by this measure; a parent who prevails in an action may be awarded any of the following relief:
   1. Up to $2,500 for the first offense and $5,000 for any subsequent offenses, or a lesser amount as determined by the court, per youth who had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Reasonable attorney’s fees and costs.
   4. Any other relief the court deems appropriate.
8. Provides that the measure does not impair or impede any other rights, causes of action, claims, or defenses available under any other law, including, but not limited to, the statutory right of publicity; and that the remedies are cumulative with any other remedies available under any other law.

Comments

Parents and guardians are becoming increasingly concerned with their children’s digital footprints. An innocently posted photo or video of a child, without privacy protections, can be used for a host of nefarious purposes, such the creation of deepfake materials, identity theft, and training AI. Many parents and guardians want to protect their children from these consequences, but not at the expense of their child’s participation in youth-focused programming, like sports leagues, camps, or other recreation activities. According to the author, however, some youth-focused programs are apathetic, or downright hostile, to parents’ and guardians’ requests that the program not use their child’s personal information in the program’s public-facing materials.

To provide parents with greater control over the use of their child’s image, this bill requires organizations that offer youth-serving programming to provide a parent or guardian with a standalone release document that details specifically how and where a youth’s information is intended to be used, and requires a program to obtain a parent or guardian’s affirmative written consent before using their child’s information in those manners. Additionally, this bill prohibits organizations from making participation in programming contingent on a parent or guardian’s waiver of their child’s privacy rights, and prohibits the organization from sharing or selling the child’s covered information. This bill also creates a private right of action against a covered entity that violates this bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent.

FISCAL EFFECT: Appropriation: No Fiscal Com.: Yes Local: No

According to the Senate Appropriations Committee, the fiscal impact is as follows:

The bill creates a private right of action against a covered entity that violates the bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent. Unknown, potentially significant costs to the courts to adjudicate civil enforcement actions. An eight-hour court day costs approximately $10,500 based on the hourly rate of court personnel including at minimum the judge, clerk, bailiff, court reporter, jury administrator, administrative staff, and jury per-diems. While the courts are not funded on a workload basis, an increase in workload could result in delayed court services and would put pressure on the General Fund to fund additional staff and resources. The FY 2026-27 Budget appropriated $70 million General Fund for this purpose (Trial Court Trust Fund, General Fund).

SUPPORT: (Verified 8/19/26)

California Catholic Conference

CFT — A Union of Educators & Classified Professionals, AFT, AFL-CIO

Informed Policy Advocates

OPPOSITION: (Verified 8/19/26)

City of Chino Hills

ARGUMENTS IN SUPPORT: According to the California Catholic Conference:

The California Catholic Conference particularly appreciates that the bill requires express written parental consent after providing clear notice regarding how a youth’s identifying information will be used. Equally important, the bill prohibits organizations from conditioning a child’s participation in a program on the provision of such consent. This protection ensures that families are not forced to choose between participation opportunities and their child’s privacy rights.

AB 2007 also appropriately prohibits the sale or sharing of a youth’s identifying information and limits the use of that information solely to the purpose for which consent was granted. These provisions provide meaningful safeguards at a time when concerns regarding privacy, data collection, digital marketing, and the use of children’s personal information continue to grow.

ARGUMENTS IN OPPOSITION: According to the City of Chino Hills:

Cities routinely obtain parental permission before using photographs or videos of youth participants in activity guides, brochures, newsletters, websites, and social media to promote community programs. These materials are intended to inform residents of available services, encourage participation, and highlight the success of City programs. They are not intended to exploit, endanger, or otherwise misuse a child’s image…

AB 2007 authorizes private civil actions, statutory penalties, attorney’s fees, and injunctive relief. Even an inadvertent failure to identify an archived photograph or video could expose a city to significant legal liability despite acting in good faith and obtaining appropriate parental consent at the time the material was created.

ASSEMBLY FLOOR: 72-0, 5/21/26

AYES: Addis, Aguiar-Curry, Ahrens, Alanis, Alvarez, Ávila Farías, Bains, Bauer-Kahan, Bennett, Berman, Boerner, Bonta, Bryan, Calderon, Caloza, Carrillo, Castillo, Connolly, Davies, DeMaio, Dixon, Elhawary, Ellis, Flora, Fong, Gabriel, Gallagher, Gipson, Jeff Gonzalez, Mark González, Hadwick, Haney, Harabedian, Hart, Jackson, Johnson, Kalra, Krell, Lee, Lowenthal, Macedo, McKinnor, Muratsuchi, Nguyen, Ortega, Pacheco, Papan, Patel, Patterson, Pellerin, Petrie-Norris, Quirk-Silva, Ransom, Michelle Rodriguez, Rogers, Blanca Rubio, Sanchez, Schiavo, Schultz, Sharp-Collins, Solache, Soria, Stefani, Ta, Tangipa, Valencia, Wallis, Ward, Wicks, Wilson, Zbur, Rivas

NO VOTE RECORDED: Arambula, Chen, Garcia, Hoover, Irwin, Lackey, Ramos, Celeste Rodriguez

Prepared by: Allison Whitt Meredith / JUD. / (916) 651-4113

8/24/26 10:43:07

**** END ****

 THIRD READING  

Bill No: AB 2007

Author: Bauer-Kahan (D), et al.

Amended: 7/2/26 in Senate

Vote: 21

SENATE JUDICIARY COMMITTEE: 13-0, 6/23/26

AYES: Umberg, Niello, Allen, Ashby, Caballero, Durazo, Laird, Reyes, Stern, Valladares, Wahab, Weber Pierson, Wiener

SENATE PRIV., DIGITAL TECH., & CONS. PROT. COMMITTEE: 7-0, 6/29/26

AYES: Cabaldon, Gonzalez, McNerney, Padilla, Reyes, Umberg, Wiener

NO VOTE RECORDED: Seyarto, Ochoa Bogh

SENATE APPROPRIATIONS COMMITTEE: 6-0, 8/13/26

AYES: Cervantes, Cabaldon, Dahle, Grayson, Richardson, Wahab

NO VOTE RECORDED: Seyarto

ASSEMBLY FLOOR: 72-0, 5/21/26 - See last page for vote

SUBJECT: Youth programs: identifying information of youth

SOURCE: Author

DIGEST:

This bill requires youth-focused programs, such as extracurricular and after-school programs, to obtain parental consent before using images of a child or other protected information in their communications, marketing, educational, or training materials, as specified.

ANALYSIS:

Existing constitutional law provides that all people are, by nature, free and independent and have inalienable rights, including the fundamental right to privacy. (Cal. Const., Art. I, § 1.)

Existing state law:

1. States that the “right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution and that all individuals have a right of privacy in information pertaining to them,” and that the Legislature finds all of the following:
   1. The right to privacy is being threatened by the indiscriminate collection, maintenance, and dissemination of personal information and the lack of effective laws and legal remedies.
   2. The increasing use of computers and other sophisticated information technology has greatly magnified the potential risk to individual privacy that can occur from the maintenance of personal information.
   3. In order to protect the privacy of individuals, it is necessary that the maintenance and dissemination of personal information be subject to strict limits. (Civil (Civ.) Code, § 1798.1.)
2. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to businesses’ collection of their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on businesses to respect those rights. (Civ. Code, div. 3, pt. 4, tit. 1.81.5, §§ 1798.100 et seq.)
3. Defines “personal information” within the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably linked, directly, or indirectly, with a particular consumer or household, including the following:
   1. Identifiers such as a real name, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
   2. Characteristics of protected classifications under California or federal law.
   3. Commercial information, including property records and records of purchases.
   4. Biometric information.
   5. Internet or other electronic network activity information, including browser and search history.
   6. Geolocation data.
   7. Audio, electronic, visual, thermal, olfactory, or similar information. (Civ. Code, § 1798.140(v)(1).)
4. Excludes, from the definition of “personal information” within the CCPA:
   1. Publicly available information or lawfully obtained, truthful information that is a matter of public concern.
   2. Deidentified or aggregate consumer information. (Civ. Code, § 1798.140(v)(2) & (3).)
5. Prohibits a business from selling or sharing the personal information of a consumer if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of those who are between 13 and 16 years of age, or the consumer’s parent or guardian, in the case of a consumer who is less than 13 years of age, has affirmatively authorized the sale or sharing of the information. (Civ. Code, § 1798.120.)
6. Provides that any person who knowingly uses another’s name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that person’s prior consent, or, in the case of a minor, the prior consent of their parent or guardian, shall be liable for the following:
   1. Statutory damages of $750 per violation or the actual damages suffered by the person, whichever is greater.
   2. Any profits from the unauthorized use that are attributable to the use and are not taken into account in computing the actual damages.
   3. Punitive damages.
   4. Attorney’s fees and costs. (Civ. Code, § 3344(a).)
7. Provides that the use of a name, voice, signature, photograph, or likeness in a commercial medium shall not constitute a use for which consent is required under 6) solely because the material containing the use is commercially sponsored or contains paid advertising; rather, it shall be a question of fact as to whether or not the use of the name, voice, signature, photograph, or likeness was so directly connected with the commercial sponsorship or with the paid advertising as to constitute a use for which consent is required under 6). (Civ. Code, § 3344(f).)

This bill:

1. Defines the following relevant terms:
   1. “Covered entity” means an entity or organization that operates a covered program.
   2. “Covered program” means a program or activity, including, but not limited to, a program related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment or a day or overnight camp, that meets both of the below criteria, but excludes a business that is hosting or participating in a covered entity’s program, as specified:
      1. The program or activity requires a parent signature or consent form authorization, or the program or activity is an event in which a parent provides written authorization for an organization to act in loco parentis.
      2. The program or activity is offered primarily to youth outside of school hours, including periods when school is not in session, and is not operated by a public or private elementary or secondary school.
   3. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information as defined under the CCPA, or any other identifying information.
   4. “Marketing purposes” means promotions, newsletters, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
2. Prohibits a covered entity from making a youth’s enrollment or participation in a covered program contingent upon a parent or guardian consenting to the covered program’s use of the youth’s covered information for any communications, marketing, or other purpose that exposes that information to the public.
3. Prohibits a covered entity from using a youth’s covered information for communications, marketing, educational, or other purpose that exposes that information to the public unless the covered entity obtains the parent or guardian’s express written consent on a notice that complies with all of the following:
   1. The notice communicates the requested uses of the youth’s covered information clearly and meaningfully, including a description of any proposed use of the youth’s covered information, including a description of the types of materials or media in which the information may be used and a list of internet websites on which the covered information may be published.
   2. The notice is contained in a single document or single page within an online form that is separate from enrollment forms, waivers of liability, and any other document.
   3. The notice includes, in clear and understandable language, that the parent or guardian is providing consent for use of the youth’s covered information for communications, marketing, or other purpose that exposes that information to the public as communicated in the required description.
   4. The notice includes, in clear and understandable language, that the parent or guardian may revoke consent at any time and clearly and conspicuously states that the youth’s enrollment or participation is not contingent upon consent.
   5. The notice provides an electronic mail address at which the parent or guardian can contact the covered program relating to the scope of consent, revocation of consent, or other issues relating to a youth’s covered materials.
4. Prohibits a covered entity from selling covered information of a youth for any reason, regardless of whether the parent or guardian provided consent to that use.
5. Permits a parent or guardian to revoke consent through the email address provided in 3)(e) at any time during the youth’s enrollment in the covered program and up to one year after the youth is no longer in the program.
6. Provides that a covered entity that receives a revocation of consent pursuant to 5) is not required to remove covered information from communications, marketing, educational, or training materials that were published or printed before receiving a notice revoking consent.
7. Permits a parent or guardian to bring a civil action in a court of competent jurisdiction against a covered entity for a violation of the section created by this measure; a parent who prevails in an action may be awarded any of the following relief:
   1. Up to $2,500 for the first offense and $5,000 for any subsequent offenses, or a lesser amount as determined by the court, per youth who had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Reasonable attorney’s fees and costs.
   4. Any other relief the court deems appropriate.
8. Provides that the measure does not impair or impede any other rights, causes of action, claims, or defenses available under any other law, including, but not limited to, the statutory right of publicity; and that the remedies are cumulative with any other remedies available under any other law.

Comments

Parents and guardians are becoming increasingly concerned with their children’s digital footprints. An innocently posted photo or video of a child, without privacy protections, can be used for a host of nefarious purposes, such the creation of deepfake materials, identity theft, and training AI. Many parents and guardians want to protect their children from these consequences, but not at the expense of participation in youth-focused programming, like sports leagues, camps, or other recreation activities. According to the author, however, some youth-focused programs are apathetic, or downright hostile, to parents’ and guardians’ requests that the program not use their child’s personal information in the program’s public-facing materials.

To provide parents with greater control over the use of their child’s image, this bill requires organizations that offer youth-serving programming to provide a parent or guardian with a standalone release document that details specifically how and where a youth’s information is intended to be used, and requires a program to obtain a parent or guardian’s affirmative written consent before using their child’s information in those manners. Additionally, this bill prohibits organizations from making participation in programming contingent on a parent or guardian’s waiver of their child’s privacy rights, and prohibits the organization from sharing or selling the child’s covered information. This bill also creates a private right of action against a covered entity that violates the bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent.

FISCAL EFFECT: Appropriation: No Fiscal Com.: Yes Local: No

According to the Senate Appropriations Committee, the fiscal impact is as follows:

This bill creates a private right of action against a covered entity that violates the bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent. Unknown, potentially significant costs to the courts to adjudicate civil enforcement actions. An eight-hour court day costs approximately $10,500 based on the hourly rate of court personnel including at minimum the judge, clerk, bailiff, court reporter, jury administrator, administrative staff, and jury per-diems. While the courts are not funded on a workload basis, an increase in workload could result in delayed court services and would put pressure on the General Fund to fund additional staff and resources. The FY 2026–27 Budget appropriated $70 million General Fund for this purpose (Trial Court Trust Fund, General Fund).

SUPPORT: (Verified 8/13/26)

California Catholic Conference

CFT — A Union of Educators & Classified Professionals, AFT, AFL-CIO

Informed Policy Advocates

OPPOSITION: (Verified 8/13/26)

City of Chino Hills

ARGUMENTS IN SUPPORT: According to the California Catholic Conference:

The California Catholic Conference particularly appreciates that the bill requires express written parental consent after providing clear notice regarding how a youth’s identifying information will be used. Equally important, the bill prohibits organizations from conditioning a child’s participation in a program on the provision of such consent. This protection ensures that families are not forced to choose between participation opportunities and their child’s privacy rights.

AB 2007 also appropriately prohibits the sale or sharing of a youth’s identifying information and limits the use of that information solely to the purpose for which consent was granted. These provisions provide meaningful safeguards at a time when concerns regarding privacy, data collection, digital marketing, and the use of children’s personal information continue to grow.

Catholic Social Teaching emphasizes the inherent dignity of every human person and the responsibility of society to protect vulnerable populations, especially children. The principles of human dignity, subsidiarity, and the common good all support policies that empower families, respect parental authority, and protect children from exploitation or misuse of their personal information. AB 2007 advances these principles by placing decision-making authority where it belongs—with parents and guardians—while establishing clear and reasonable expectations for organizations serving youth.

ARGUMENTS IN OPPOSITION: According to the City of Chino Hills:

Cities routinely obtain parental permission before using photographs or videos of youth participants in activity guides, brochures, newsletters, websites, and social media to promote community programs. These materials are intended to inform residents of available services, encourage participation, and highlight the success of City programs. They are not intended to exploit, endanger, or otherwise misuse a child’s image…

AB 2007 authorizes private civil actions, statutory penalties, attorney’s fees, and injunctive relief. Even an inadvertent failure to identify an archived photograph or video could expose a city to significant legal liability despite acting in good faith and obtaining appropriate parental consent at the time the material was created.

ASSEMBLY FLOOR: 72-0, 5/21/26

AYES: Addis, Aguiar-Curry, Ahrens, Alanis, Alvarez, Ávila Farías, Bains, Bauer-Kahan, Bennett, Berman, Boerner, Bonta, Bryan, Calderon, Caloza, Carrillo, Castillo, Connolly, Davies, DeMaio, Dixon, Elhawary, Ellis, Flora, Fong, Gabriel, Gallagher, Gipson, Jeff Gonzalez, Mark González, Hadwick, Haney, Harabedian, Hart, Jackson, Johnson, Kalra, Krell, Lee, Lowenthal, Macedo, McKinnor, Muratsuchi, Nguyen, Ortega, Pacheco, Papan, Patel, Patterson, Pellerin, Petrie-Norris, Quirk-Silva, Ransom, Michelle Rodriguez, Rogers, Blanca Rubio, Sanchez, Schiavo, Schultz, Sharp-Collins, Solache, Soria, Stefani, Ta, Tangipa, Valencia, Wallis, Ward, Wicks, Wilson, Zbur, Rivas

NO VOTE RECORDED: Arambula, Chen, Garcia, Hoover, Irwin, Lackey, Ramos, Celeste Rodriguez

Prepared by: Allison Whitt Meredith / JUD. / (916) 651-4113

8/15/26 14:16:00

**** END ****

SENATE COMMITTEE ON

Senator Sabrina Cervantes, Chair

2025 - 2026 Regular Session

AB 2007 (Bauer-Kahan) - Youth programs: identifying information of youth

Bill Summary:

AB 2007 would require youth programs to obtain parental consent before using images of a child or other protected information in their communications, marketing, education or training materials. The bill creates a private right of action against a covered entity.

Fiscal Impact:

The bill creates a private right of action against a covered entity that violates the bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent. Unknown, potentially significant costs to the courts to adjudicate civil enforcement actions. An eight-hour court day costs approximately $10,500 based on the hourly rate of court personnel including at minimum the judge, clerk, bailiff, court reporter, jury administrator, administrative staff, and jury per-diems. While the courts are not funded on a workload basis, an increase in workload could result in delayed court services and would put pressure on the General Fund to fund additional staff and resources. The FY 2026-27 Budget appropriated $70 million General Fund for this purpose (Trial Court Trust Fund, General Fund).

Background:

To provide parents with greater control over the use of their child’s image, this bill requires organizations that offer youth-serving programming to provide a parent or guardian with a stand-alone release document that details specifically how and where a youth’s information is intended to be used, and that the parent or guardian may revoke their consent at any time. Additionally, this bill prohibits organizations from making participation in programming contingent on a parent or guardian waiving their child’s privacy rights and prohibits the organization from sharing or selling the child’s covered information.

Covered entity” means an entity or organization that operates a covered program.

Covered program means a program or activity, including, but not limited to, a program related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment or a day or overnight camp, that meets both of the following criteria.

1. The program or activity requires a parent signature or consent form authorization, or the program or activity is an event in which a parent provides written authorization for an organization to act in the place of a parent.
2. The program or activity is offered primarily to youth outside of school hours, including periods when school is not in session, and is not operated by a public or private elementary or secondary school.

Proposed Law: A parent or guardian may bring a civil action against a covered entity for a violation of Business and Professions Code 18985, as added by the bill. A parent who prevails in a civil action may be awarded any of the following relief:

1. Up to $2,500 for the first offense and $5,000 for any subsequent offenses, or a lesser amount as determined by the court, per youth who has had the youth’s covered information disclosed.

2) Injunctive or declaratory relief.

3) Reasonable attorney’s fees and costs.

4) Any other relief the court deems appropriate.

SENATE PRIVACY, DIGITAL TECHNOLOGIES, AND CONSUMER PROTECTION COMMITTEE

Senator Christopher Cabaldon, Chair

2025-2026 Regular Session

Bill No: AB 2007 (Author:Bauer-Kahan)

Version: March 17, 2026

Hearing Date: June 29, 2026

Fiscal: No

Urgency: No

Consultant: CK

SUBJECT

Youth programs: identifying information of youth

DIGEST

This bill prohibits certain covered entities offering programs or activities to youth outside of school hours from using the information of youth except with the express consent of their parents, as provided.^[1]

EXECUTIVE SUMMARY

Participation in afterschool programs, enrichment activities, sports, and other programs is a crucial part of many children’s childhood. Increasingly, many of the organizations providing these programs and activities rely on the use of children’s images, videos, and personal stories to advertise their programs and services. This includes postings on websites, social media platforms, and elsewhere. Concerns have arisen about the privacy and security implications of using children’s personal information in this way. A photo posted to a public social media account, for example, can be downloaded, cropped, and misused by anyone. Predators have been known to use publicly available images of children to identify targets, map routines, create deepfakes and make inappropriate contact. Beyond physical safety, children deserve the right to grow up without a permanent digital footprint they never agreed to.

This bill ensures that children’s privacy and safety are put first by prohibiting covered entities that provide these programs and services from using the photos, videos, and other personal information of children except in specified circumstances where parental consent is clearly provided after clear notice of the terms of such use is provided. The bill is author-sponsored. No timely support or opposition has been received by the Committee. The bill passed out of the Senate Judiciary Committee on a vote of 13 to 0.

PROPOSED CHANGES TO THE LAW

Existing law:

1. Provides, pursuant to the California Constitution, that all people have inalienable rights, including the right to pursue and obtain privacy. (Cal. Const., art. I, § 1.)
2. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on businesses to respect those rights. It does not apply to government entities. (Civ. Code § 1798.100 et seq.)
3. Prohibits a business from selling or sharing the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumer’s parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumer’s personal information. A business that willfully disregards the consumer’s age shall be deemed to have had actual knowledge of the consumer’s age. (Civ. Code § 1798.120(c).)
4. Defines “personal information” for purposes of the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The CCPA provides a nonexclusive series of categories of information deemed to be personal information, including biometric information, geolocation data, and “sensitive personal information.” (Civ. Code § 1798.140(v)(1).)
5. Defines “expanded learning” as before school, after school, summer, or intersession learning programs that focus on developing the academic, social, emotional, and physical needs and interests of pupils through hands-on, engaging learning experiences. It is the intent of the Legislature that expanded learning programs are pupil-centered, results driven, include community partners, and complement, but do not replicate, learning activities in the regular schoolday and school year. (Educ. Code § 8482.1(a).)
6. Establishes the Age Appropriate Design Code, which, in part, prohibits a business that provides an online service, product, or feature likely to be accessed by children from taking any of the following actions:
   1. Using the personal information of any child in a way that the business knows, or has reason to know, is materially detrimental to the physical health, mental health, or well-being of a child.
   2. Profiling a child by default except as specified.
   3. Collect, sell, share, or retain any personal information that is not necessary to provide an online service, product, or feature with which a child is actively and knowingly engaged, except as specified.
   4. Use personal information for any reason other than a reason for which that personal information was collected, unless the business can demonstrate it is in the best interests of children.
   5. Collect, sell, or share any precise geolocation information of children by default unless strictly necessary, as specified.
   6. Collect any precise geolocation information of a child without providing an obvious sign to the child for the duration of that collection.
   7. Use dark patterns to lead or encourage children to provide personal information beyond what is reasonably expected.
   8. Use any personal information collected to estimate age or age range for any other purpose or retain that personal information longer than necessary to estimate age. (Civ. Code § 1798.99.31(b).)

This bill:

1. Defines the relevant terms, including:
   1. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information, as defined in the CCPA, or any other identifying information.
   2. “Covered entity” means an entity or organization that operates a covered program.
   3. “Covered program” means a program or activity including a program related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment or a day or overnight camp, that meets the following criteria:
      1. The program or activity requires a parent signature or consent form authorization, or the program or activity is an event in which a parent provides written authorization for an organization to act in loco parentis.
      2. The program or activity is offered primarily to youth outside of school hours, including periods when school is not in session, and is not operated by a public or private elementary or secondary school.
   4. “Marketing purposes” means promotions, newsletters, brochures, social media, or other public-facing materials that describe a covered program or solicit participation. This does not include materials shared with a parent or guardian of a youth participating in the program, provided that the materials cannot be accessed by the general public.
2. Prohibits a “covered entity” from using a youth’s “covered information” for a communications, marketing, education, or training purpose unless the covered entity obtains the parent or guardian’s express written consent on a notice that does the following:
   1. Communicates the requested uses of the youth’s covered information clearly and meaningfully, including a description of any proposed use with a description of the types of materials or media in which it may be used and a list of websites on which it may be published.
   2. Is contained in a single document or separate page within an online form that is separate from enrollment forms, waivers of liability, and any other document.
   3. Includes, in clear and understandable language, that the parent or guardian is providing consent for use of the youth’s covered information for communications, marketing, educational, or training purposes.
   4. Includes, in clear and understandable language, that the parent or guardian may revoke consent at any time and clearly and conspicuously states that the youth’s enrollment or participation is not contingent upon consent.
   5. Provides an email address to revoke that consent.
3. Provides that a parent or guardian can revoke consent at any time during enrollment through one year after. This does not require removal of covered information in materials already published or printed before receiving a revocation notice.
4. Prohibits a covered entity from making a youth’s enrollment or participation in a covered program contingent upon consenting to the use of covered information for any communications, marketing, educational, or training purpose.
5. Prohibits a covered entity from selling a youth’s covered information for any reason, regardless of whether the parent or guardian consented to that use.
6. Authorizes a parent or guardian to bring a civil action against a covered entity for any violation and to seek the following relief:
   1. Up to $2,500 for the first offense and $5,000 for subsequent offenses per youth who has had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Reasonable attorney’s fees and costs.
   4. Any other relief the court deems appropriate.

COMMENTS

1. The importance of protecting children’s digital footprints

Parents and guardians are expressing growing concern regarding their children’s digital footprints. Beyond these direct harms,

It is a sad reality that many parents must be vigilant about their children’s digital footprint. Children lack the legal capacity and developmental maturity to meaningfully consent to the use of their personal information, placing the responsibility for protecting their digital interests squarely on parents, guardians, and the organizations that serve them. The widespread and often permanent nature of digital content means that information shared today may follow a child into adulthood. An innocently posted photo or video of a child, absent appropriate privacy protections, may be exploited for a range of harmful purposes, including the creation of deepfake materials, identity theft, and AI training datasets.

This has prompted all sorts of guides for protecting children. One explains:

Your child’s latest birthday photo, that cute dance video. Share them on social media and they add to your family’s digital footprint. And depending on the settings you’ve chosen, AI could use them.

Dr. Siwei Lyu, a digital forensics expert and father of two, is a Distinguished professor of computer science at SUNY who studies how AI learns from public data. The danger of sharing anything online is that it becomes fair game for AI deepfakes: fake photos, videos or voices built from real images or recordings. Deepfakes can impersonate anyone, including kids and teens.

“A child’s data might be misused to recreate an image or video of them in situations that aren’t real,” Lyu explains. “That content can stay online and affect your child for years.”^[2]

1. Protecting children’s privacy in after-school programs and other activities

Many parents and guardians wish to safeguard their children from these risks without forgoing their participation in youth-focused programming, such as sports leagues, camps, or other recreational activities. However, often the programs offering these activities utilize photos or videos of children to market their programs, either posting on social media or using in promotional materials.

This bill seeks to better protect children in these situations by prohibiting “covered entities” that offer “covered programs” from using a child’s “covered information” for communications, marketing, educational, or training purposes unless they obtain express written consent from a parent or guardian.

A “covered entity” is one that offers a “covered program,” a program or activity including a program related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment or a day or overnight camp, that requires a parent signature or consent form authorization, or the program or activity is an event in which a parent provides written authorization for an organization to act in loco parentis. The program must also be offered primarily to youth outside of school hours, including periods when school is not in session, and is not operated by a public or private elementary or secondary school. “Covered information” means a picture, video, audio recording, likeness, attributed statement, or other personal information.

To ensure meaningful consent, a notice must be provided that includes specified information, including disclosure about the requested uses, the types of materials and websites the information will be used in, and clearly indicate the rights of parents or guardians to revoke consent, as well as the right to participate in the covered program without providing consent in the first place.

Covered entities are also prohibited from selling a youth’s personal information for any purpose, regardless of consent.

Parents or guardians are authorized to bring enforcement actions against entities in violation seeking statutory penalties and other relief.

According to the author:

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor’s participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child’s information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child’s privacy while maintaining transparency and trust between youth organizations and the families they serve.

1. Concerns

Writing jointly, the California Park & Recreation Society and the League of California Cities highlight concerns with the bill:

Local park and recreation agencies provide a wide array of expanded learning, arts, athletics, recreation, and enrichment programs to children and families across California. These programs are delivered during after-school hours, on weekends, and during school vacation periods — squarely within the bill’s definition of a “covered entity.” Our agencies serve millions of youths annually, many of them from lower-income households who depend on affordable, publicly operated programming. We are not commercial operators seeking to monetize personal data; we are public agencies accountable to the communities we serve. Public Park and recreation agencies already routinely obtain parental acknowledgments, liability waivers, and media release permissions through existing registration systems and program enrollment processes. Our concern is not with obtaining appropriate consent, but with the bill’s operationally rigid and duplicative consent structure.

Overly Broad Definition of “Covered Information” Creates Unworkable Standards

The bill defines “covered information” to include pictures, videos, audio recordings, likenesses, attributed statements, and any “other identifying information.” This sweeping definition would capture routine, benign communications that parks and recreation agencies have long used to promote programs and celebrate participant achievements.^[3]

In response to some concerns about the breadth of the bill, the author has agreed to amendments that narrow the bill to communications, marketing, and other purposes that expose the covered information to the public.

SUPPORT

None received

OPPOSITION

None received

RELATED LEGISLATION

SB 1247 (Padilla, 2026) authorizes a child influencer, as defined, to demand the removal of family vlogging content featuring them when they were a minor. SB 1247 is currently on the Assembly floor.

PRIOR VOTES:

Senate Judiciary Committee (Ayes 13, Noes 0)

Assembly Floor (Ayes 72, Noes 0)

Assembly Appropriations Committee (Ayes 15, Noes 0)

Assembly Judiciary Committee (Ayes 12, Noes 0)

Assembly Privacy and Consumer Protection Committee (Ayes 15, Noes 0)

**************

1. Amendments were agreed to in the Senate Judiciary Committee, but, due to timing, they will be taken in this Committee. This analysis is of the bill as agreed to be amended. ↑

2. Molly McGinn, AI deepfakes and your kid’s digital footprint: What parents should know (December 16, 2025) Verizon, https://www.verizon.com/about/parenting/ai-and-your-kids-digital-footprint-safety-guide [as of June 24, 2026]. ↑

3. Emphasis in original. ↑

SENATE JUDICIARY COMMITTEE

Senator Thomas Umberg, Chair

2025-2026 Regular Session

Bill No: AB 2007 (Author:Bauer-Kahan)

Version: June 15, 2026

Hearing Date: June 23, 2026

Fiscal: No

Urgency: No

Consultant: AWM

SUBJECT

Youth programs: identifying information of youth

DIGEST

This bill requires youth-focused programs, such as extracurricular and after-school programs, to obtain parental consent before using images of a child or other protected information in their communications, marketing, educational, or training materials, as specified.

EXECUTIVE SUMMARY

Parents and guardians are becoming increasingly concerned with their children’s digital footprints. An innocently posted photo or video of a child, without privacy protections, can be used for a host of nefarious purposes, such the creation of deepfake materials, identity theft, and training AI. Many parents and guardians want to protect their children from these consequences, but not at the expense of participation in youth-focused programming, like sports leagues, camps, or other recreation activities. According to the author, however, some youth-focused programs are apathetic, or downright hostile, to parents’ and guardians’ requests that the program not use their child’s personal information in the program’s public-facing materials.

To provide parents with greater control over the use of their child’s image, this bill requires organizations that offer youth-serving programming to provide a parent or guardian with a stand-alone release document that details specifically how and where a youth’s information is intended to be used, and that the parent or guardian may revoke their consent at any time. Additionally, this bill prohibits organizations from making participation in programming contingent on a parent or guardian waiving their child’s privacy rights and prohibits the organization from sharing or selling the child’s covered information. The bill creates a private right of action against a covered entity that violates the bill’s requirements, which may be brought by the parent or guardian of the child whose image or information was used without consent. The author has agreed to a number of amendments to respond to stakeholder concerns; due to the timing of the hearings, these amendments will be taken in the Senate Privacy, Digital Technologies, and Consumer Protection Committee.

This bill is sponsored by the author and is supported by the California Catholic Conference. Although the Committee has not received formal opposition to the bill, the Committee has received a letter of concern from the California League of Cities and the California Park & Recreation Society. If this Committee passes this bill, it will be referred to the Senate Privacy, Digital Technologies, and Consumer Protection Committee.

PROPOSED CHANGES TO THE LAW

Existing constitutional law provides that all people are, by nature, free and independent and have inalienable rights, including the fundamental right to privacy. (Cal. Const., art. I, § 1.)

Existing state law:

1. States that the “right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution and that all individuals have a right of privacy in information pertaining to them,” and that the Legislature finds all of the following:
   1. The right to privacy is being threatened by the indiscriminate collection, maintenance, and dissemination of personal information and the lack of effective laws and legal remedies.
   2. The increasing use of computers and other sophisticated information technology has greatly magnified the potential risk to individual privacy that can occur from the maintenance of personal information.
   3. In order to protect the privacy of individuals, it is necessary that the maintenance and dissemination of personal information be subject to strict limits. (Civ. Code, § 1798.1.)
2. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to businesses’ collection of their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on businesses to respect those rights. (Civ. Code, div. 3, pt. 4, tit. 1.81.5, §§ 1798.100 et seq.)
3. Defines “personal information” within the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably linked, directly, or indirectly, with a particular consumer or household, including the following:
   1. Identifiers such as a real name, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
   2. Characteristics of protected classifications under California or federal law.
   3. Commercial information, including property records and records of purchases.
   4. Biometric information.
   5. Internet or other electronic network activity information, including browser and search history.
   6. Geolocation data.
   7. Audio, electronic, visual, thermal, olfactory, or similar information. (Civ. Code, § 1798.140(v)(1).)
4. Excludes, from the definition of “personal information” within the CCPA:
   1. Publicly available information or lawfully obtained, truthful information that is a matter of public concern.
   2. Deidentified or aggregate consumer information. (Civ. Code, § 1798.140(v)(2) & (3).)
5. Prohibits a business from selling or sharing the personal information of a consumer if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of those who are between 13 and 16 years of age, or the consumer’s parent or guardian, in the case of a consumer who is less than 13 years of age, has affirmatively authorized the sale or sharing of the information. (Civ. Code, § 1798.120.)
6. Provides that any person who knowingly uses another’s name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods, or services, without that person’s prior consent, or, in the case of a minor, the prior consent of their parent or guardian, shall be liable for the following:
   1. Statutory damages of $750 per violation or the actual damages suffered by the person, whichever is greater.
   2. Any profits from the unauthorized use that are attributable to the use and are not taken into account in computing the actual damages.
   3. Punitive damages.
   4. Attorney’s fees and costs. (Civ. Code, § 3344(a).)
7. Provides that the use of a name, voice, signature, photograph, or likeness in a commercial medium shall not constitute a use for which consent is required under 6) solely because the material containing the use is commercially sponsored or contains paid advertising; rather, it shall be a question of fact as to whether or not the use of the name, voice, signature, photograph, or likeness was so directly connected with the commercial sponsorship or with the paid advertising as to constitute a use for which consent is required under 6). (Civ. Code, § 3344(f).)

This bill:

1. Defines the following terms:
   1. “Covered entity” means a program or activity that requires a parent signature or consent form authorization, or an event in which a parent designates authority for an organization to act in loco parentis, that is offered primarily to youth outside of school hours, including periods when school is not in session, and that is not operated by a public or private elementary or secondary school, that may include programs related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment; “covered entity” does not include a business that is hosting or participating in a covered entity’s program or activity for a field trip or other occasional activity, including amusement or water parks, zoos, aquariums, restaurants, state or county fairs, and movie theaters.
   2. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information as defined under the CCPA, or any other identifying information.
   3. “Expanded learning” has the same meaning as in the Education Code, as specified.
   4. “Marketing purposes” means promotions, newsletters, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
   5. “Public or private elementary or secondary school” means either of the following:
      1. An elementary or secondary school operated by the governing board of a school district or county office of education, or the governing body of a charter school.
      2. An elementary or secondary school that has filed an affidavit with the Superintendent of Public Instruction and that reports a total enrollment of six or more students.
2. Prohibits a covered entity from using a youth’s covered information for communications, marketing, educational, or training purpose unless the covered entity obtains the express written or electronic signature of the parent or guardian of the youth on a notice that complies with all of the following:
   1. The notice communicates the requested uses of the youth’s covered information clearly but meaningfully, including a detailed list that includes all websites, brochures, or other materials or media where the covered entity is requesting to use the youth’s covered information.
   2. The notice is contained in a single document or single website that is separate from enrollment forms, waivers of liability, and any other document.
   3. The notice includes, in clear and understandable language, that the parent or guardian is providing consent for use of the youth’s covered information for communications, marketing, educational, or training purposes and includes a detailed list of all types of communications, marketing, educational, or training purposes for which consent is sought.
   4. The notice includes, in clear and understandable language, that the parent or guardian may revoke consent at any time and provides an e-mail address for submitting revocation.
3. Prohibits a covered entity from making enrollment or participation contingent upon a parent or guardian providing consent pursuant to 2), and requires the notice to clearly and conspicuously state that enrollment or participation is not contingent upon consent.
4. Prohibits a covered entity from selling covered information of a youth for any reason, regardless of whether the parent or guardian provided consent to that use pursuant to 2).
5. Permits a parent or guardian to revoke consent at any time during the youth’s enrollment in the covered program and up to one year after the youth is no longer in the program.
6. Requires a covered entity to remove the youth’s covered information from communications, marketing, educational, and training materials within seven days of receiving a notice of consent revocation under 5); the covered entity is not, however, required to remove covered information from communications, marketing, educational, or training materials that were printed prior to receiving a notice revoking consent.
7. Permits a parent or guardian to bring a civil action in a court of competent jurisdiction against a covered entity for a violation of the section created by this measure; a parent who prevails in an action may be awarded any of the following relief:
   1. Up to $2,500 for the first offense and $5,000 for any subsequent offenses, or a lesser amount as determined by the court, per youth who had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Reasonable attorney’s fees and costs.
   4. Any other relief the court deems appropriate.
8. Provides that the measure does not impair or impede any other rights, causes of action, claims, or defenses available under any other law, including, but not limited to, the statutory right of publicity; and that the remedies are cumulative with any other remedies available under any other law.

COMMENTS

1. Author’s comment

According to the author:

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor’s participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child’s information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child’s privacy while maintaining transparency and trust between youth organizations and the families they serve.

2. The incredibly depressing risks of posting photos of children on the internet

Back when social media was a new thing, the ability to easily share photos among friends and family seemed like all upside. For a while, it was not unusual for parents^[1] to flood their social media channels with baby and kid photos. It soon became clear, however, that “sharenting” can have unintended consequences:

Images of children posted online can be downloaded and used by others. One example of the misuse of photographs is called “digital kidnapping” where an image posted by a parent is used by another adult, and the child pictured is portrayed as belonging to the other adult. Another danger is that photos of children posted on social media can be shared to child pornography sites and the images can be traced back to the original Facebook page. In these cases, further information about the child can be gained, including the child’s home address or school name. Additionally, sites now exist purely for the purpose of ridiculing images that have been posted on social media.^[2]

The rise of generative AI, which can create photorealistic images of humans, increases the downsides. “Children’s faces and likenesses are sensitive biometric data that can be scraped from social media posts and used to create deepfakes—AI-generated synthetic media that mimic real images, audio, or video.”^[3] A 2018 study suggested that photos posted online by parents “will account for two-thirds of identity fraud facing young people by the end of the next decade.”^[4] A New York Times investigation found that “an unprecedentedly huge facial recognition database called MegaFace” created a database of the likenesses of nearly 700,000 individuals using images scraped from photo storage sites like Flickr.^[5]

Evidence suggests that many parents are unaware of the risks posed by sharing their kids’ photos and videos online, but for those with that awareness, there’s an increasing trend of keeping their kids’ images off of social media.^[6] For those parents who are working to protect their kids’ digital footprint, however, their efforts can be undermined when their kids’ schools and extracurricular programs fail to practice the same caution. For example:

[A]n unnamed UK secondary school had recently been subjected to a blackmail attempt after criminals used the institution’s website or social media accounts to take photos of schoolchildren and then, using AI tools, turned them into child sexual abuse material (CSAM). The blackmailers sent the images to the school and threatened to publish them online if they did not receive money.^[7]

According to the author, there has been a problem of extracurricular programs and after-school activities declining to respect parents’ wishes to keep their kids’ faces off of the internet. The author reports that, although these programs do, in a formalistic sense, get parental consent before sharing, as a practical matter, parents have no way to decline. Tactics to compel consent include using an online consent form that doesn’t give parents the option to decline specific terms; failing to provide contact information to a person at the program to withdraw consent; and, in at least one case, prohibiting a child from participating in a program after the parent reached out to decline consent. This consent-or-nothing approach also leaves children who are facing more immediate threats from being displayed in public-facing content—such as a child whose parent has been restrained pursuant to a domestic violence restraining order—without recourse. Additionally, as the Assembly Judiciary Committee’s analysis of this bill noted, certain jurisdictions prohibit photos of foster children from being published; making enrollment contingent upon consent to permitting the use of images will, necessarily, exclude those children entirely.

3. This bill prohibits after-school and extracurricular programs for minors from using minors’ personal information, as defined, without parental consent

To ensure that parents don’t have to choose between their kids’ digital security and allowing their kids to participate in normal childhood activities, this bill establishes safeguards for youth-focused programs’ use of a minor’s image, likeness, or other personal information in their public-facing marketing materials. A program qualifies as a “covered entity” subject to the bill’s requirements if it meets specified criteria, including that it requires written consent from a parent or guardian to participate and is directed primarily at youth. The bill expressly exempts, from the definition of “covered entity,” a business that is hosting or participating in a covered entity’s program or activity for a field trip or other occasional activity, such as a zoo, aquarium, or amusement or water park. The author has agreed to amendments to clarify these provisions.

The bill expressly prohibits a covered entity from making enrollment or participation contingent upon the provision of consent to the use of a youth’s covered information. “Covered information” includes photos, video, and audio recordings featuring the child, as well as the child’s likeness, statements attributed to the child, and the child’s personal information protected under the CCPA. To use a child’s covered information in communications, marketing, educational, or training materials, the covered entity must obtain consent through a notice that meets specified requirements. Furthermore, irrespective of parental consent, a covered entity cannot sell a youth’s covered information for any reason. The author has agreed to amendments to streamline the notice requirements, including removing references to “electronic signatures”; under existing law, a “writing” in an agreement includes electronic signatures,^[8] so the added reference is unnecessary.

With respect to the right to revoke consent, the bill permits a parent to revoke consent up to one year after the child is no longer enrolled in the program, to a period of one year post-enrollment. The bill also makes the revocation partially retroactive: when a parent revokes consent, the covered entity has seven days to remove the child’s covered information from any digital materials featuring the child, but not from any printed materials that were printed prior to the revocation. The author has agreed to remove the provision requiring the removal of pre-revocation materials; these amendments and others are set forth in Comment 4, below.

The bill authorizes a parent to bring a civil action against a covered entity that violates this bill’s requirements. A prevailing parent may be awarded any or all of the following:

• Up to $2,500 for the first offense and up to $5,000 for any subsequent offenses, or a lesser amount as determined by the court, per youth who had their covered information disclosed.
• Injunctive or declaratory relief.
• Reasonable attorney’s fees and costs.
• Any other relief the court deems appropriate.

The bill also specifies that this right of action, and the available remedies, are in addition to other existing rights, including California’s right of publicity.

4. Stakeholder concerns and amendments

As noted above, the author recently amended the bill in response to concerns from extracurricular programs about the scope and feasibility of the bill’s requirements. Municipal organizations, however, still have concerns about the bill. For example, the League of California Cities and the California Parks & Recreation Society noted all of the following:

• “The measure could…impact routine operational practices such as youth sports team recognition, tournament brackets, swim lesson certifications, scholarship fundraising materials, volunteer recognition, camp recap videos, and community event communications that families have long associated with local recreation programming. This goes well beyond existing privacy law protections and would impose substantial administrative burdens on agencies that operate with lean staffing.”
• “The bill requires express written consent obtained through a standalone notice document that must be entirely separate from enrollment forms, liability waivers, and any other materials. For public agencies that process thousands of registrations per season — often through online registration systems — this requirement would necessitate a complete overhaul of registration workflows and technology infrastructure. Unlike private businesses, public agencies cannot easily pass these compliance costs on to consumers.”
• “The bill would authorize civil actions with damages of up to $5,000 per youth whose covered information is disclosed, plus injunctive relief, attorney’s fees, and other remedies. For public agencies operating community recreation programs on tight budgets, even inadvertent technical violations — such as including a child’s photo in a newsletter before a new consent form is completed — could result in significant financial exposure. This creates a chilling effect on ordinary, community-facing communications that serve the public interest.”
• “The bill’s revocation provision, as currently drafted, creates ambiguity for local agencies. While it seeks to give parents the ability to revoke consent for the use of their child’s information, the requirement to remove the electronic form of that information does not account for local agencies' obligations around public records and records retention. Without clarification, the bill could be interpreted to require the deletion or alteration of records that agencies are required to preserve.”

In response to these concerns and others, the author has agreed to a number of amendments, which will be taken in the Senate Privacy, Digital Technologies, and Consumer Protection. The amendments are set forth below, subject to any nonsubstantive changes the Office of Legislative Counsel may make.

Amendment 1

At page 2, in lines 9-15, and page 3, lines 1-2, delete the existing definition of “covered entity” and insert:

(1) (A) “Covered entity” means an entity or organization that operates a covered program.

Amendment 2

At page 3, in line 4, after “entity’s” insert “covered”

Amendment 3

At page 3, between lines 7 and 8, insert:

(C) “Covered program” means a program or activity that is all of the following:

(I) Requires a parent signature, consent form authorization, or an event in which a parent provides written authorization for an organization to act in loco parentis,

(II) Offered primarily to youth outside of school hours, including periods when school is not in session, and that is not operated by a public or private elementary or secondary school.

(D) Examples of a covered program include, but are not limited to, programs related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment, and day and overnight camps.

Amendment 4

At page 3, in line 14, add “(A)” after “(4)”, and between lines 16 and 17, insert:

(B) “Marketing purposes” does not include materials shared with parents or guardians of the youths participating in the program, provided that the materials cannot be accessed by the general public.

Amendment 5

At page 3, between lines 24 and 25, insert:

(b) A covered entity shall not make a youth’s enrollment or participation in a covered program contingent upon a parent or guardian consenting to the covered program’s use of the youth’s covered information for any communications, marketing, educational, or training purpose.

Amendment 6

At page 3, in lines 31-32, delete “express written or electronic signature of the parent or guardian of the youth” and insert “youth’s parent or guardian’s express written consent”

Amendment 7

At page 3, in lines 34-38, modify subparagraph (A) to read:

1. The notice communicates the requested uses of the youth’s covered information clearly and meaningfully, including a description of all of the proposed uses of the youth’s covered information, a description of the types of materials or media in which the information may be used, and a list of websites on which the covered information may be published.

Amendment 8

At page 4, in lines 1-2, delete “single internet website” and insert “separate page within an online form”

Amendment 9

At page 4, delete “and” in line 8 and delete all of lines 9-11, and insert “as set forth in the description required pursuant to subparagraph (A).”

Amendment 10

At page 4, in line 14, delete “and” and delete all of lines 15-16.

Amendment 11

At page 4, in lines 22-27, delete the existing paragraph (2) and insert:

(E) The notice clearly and conspicuously states that the youth’s enrollment or participation is not contingent upon consent.

(F) The notice provides an electronic mail address at which the parent or guardian can contact the program relating to the scope of consent, revocation of consent, or other issues relating to a youth’s covered materials.

Amendment 12

At page 4, delete lines 36-39 and insert:

(B) A revocation pursuant to subdivision (B) must be made through the electronic mail address provided pursuant to subparagraph (F) of paragraph (1) of subdivision (b).

Amendment 13

At page 5, in line 3, insert “published or” in between “were” and “printed”

6. Arguments in support

According to the California Catholic Conference:

The California Catholic Conference particularly appreciates that the bill requires express written parental consent after providing clear notice regarding how a youth's identifying information will be used. Equally important, the bill prohibits organizations from conditioning a child's participation in a program on the provision of such consent. This protection ensures that families are not forced to choose between participation opportunities and their child's privacy rights.

AB 2007 also appropriately prohibits the sale or sharing of a youth's identifying information and limits the use of that information solely to the purpose for which consent was granted. These provisions provide meaningful safeguards at a time when concerns regarding privacy, data collection, digital marketing, and the use of children’s personal information continue to grow.

Catholic Social Teaching emphasizes the inherent dignity of every human person and the responsibility of society to protect vulnerable populations, especially children. The principles of human dignity, subsidiarity, and the common good all support policies that empower families, respect parental authority, and protect children from exploitation or misuse of their personal information. AB 2007 advances these principles by placing decision-making authority where it belongs—with parents and guardians—while establishing clear and reasonable expectations for organizations serving youth.

SUPPORT

California Catholic Conference

OPPOSITION

None received.

RELATED LEGISLATION

Pending legislation: SB 1247 (Padilla, 2026) authorizes a child influencer, as defined, to demand the removal of family vlogging content featuring them when they were a minor. SB 1247 is pending before the Assembly Judiciary Committee.

Prior legislation: None known.

PRIOR VOTES:

Assembly Floor (Ayes 72, Noes 0)

Assembly Appropriations Committee (Ayes 15, Noes 0)

Assembly Judiciary Committee (Ayes 12, Noes 0)

Assembly Privacy and Consumer Protection Committee (Ayes 15, Noes 0)

**************

1. This analysis uses “parent” to include a legal guardian. ↑

2. Masur, Sharenting: Should You Share Photos and Information About Your Kids Online? (Aug. 29, 2024) Psychology Today, https://www.psychologytoday.com/us/blog/parenting-matters/202408/sharenting-should-you-share-photos-and-information-about-your-kids. All links in this analysis are current as of June 19, 2026. ↑

3. Andoh, What you need to know before sharing your child’s life online (Jun, 1, 2026) American Psychological Association, https://www.apa.org/monitor/2026/06/parents-children-sharing-online. ↑

4. Coughlan, ‘Sharenting’ puts young people at risk of online fraud (May 20, 2018) BBC, https://www.bbc.com/news/education-44153754. ↑

5. Hill & Krolik, How Photos of Your Kids Are Powering Surveillance Technology (as corrected Oct. 29, 2019) New York Times, https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html. ↑

6. E.g., Conti, et al., Sharenting: characteristics of parents publishing sensitive content of their children on online platforms (Jul. 30, 2024) Italian Journal of Pediatrics, available at https://pmc.ncbi.nlm.nih.gov/articles/PMC11290302/. ↑

7. Milmo, UK schools should remove pupils’ online photos as AI blackmail threat grows, say experts (May 7, 2026) The Guardian, https://www.theguardian.com/technology/2026/may/08/uk-schools-remove-pupils-photos-online-ai-blackmail-threat-grows. ↑

8. See Civ. Code, div. 3, pt. 2, tit. 2.5, §§ 1633.1 et seq. ↑

ASSEMBLY THIRD READING

ATR Bill Id:AB 2007

Author:(Bauer-Kahan)

As Amended Ver:March 17, 2026

Majority vote

SUMMARY

This bill would require organizations providing extracurricular activities for school-age children to offer a separate release for children's images and other personally identifying information that enables parents to affirmatively consent to waive their children's privacy.

Major Provisions

1. Defines the following:
   1. "Covered entity" means a program or activity offered primarily to youth outside of school hours, including periods when school is not in session that is not operated by a public or private elementary or secondary school. These programs may be related to expanded learning, visual and performing arts, athletics, recreation, or educational enrichment.
   2. "Covered information" means a picture, video, audio recording, likeness, attributed statement, personal information, or any other identifying information.
   3. "Expanded learning" means before or after school, summer or intersession learning programs that focus on developing the academic, social, emotional, and physical needs and interests of children through engaging, hands-on learning experiences.
   4. "Marketing purposes" means promotions, newsletter, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
   5. "Public or private elementary or secondary school" means either of the following:
      1. An elementary or secondary school operated by the governing board of a school district or county office of education, or the governing body of a charter school.
      2. An elementary or secondary school that has filed an affidavit with the Superintendent of Public Instruction and reports a total enrollment of six or more students.
2. Requires covered organizations that provide extracurricular activities for children and wish to use their covered information for marketing to obtain express consent from the child's parent or guardian on a notice that complies with the following:
   1. Communicate in a clear manner the requested uses of the child's information, including a detailed list of websites, brochures, and other materials or media where the child's information might be used.
   2. It is contained in a single document or single internet website that is separate from enrollment forms or any other documents.
   3. Includes in clear and understandable language that the parent or guardian is providing consent for the use of the child's information for communication or marketing purposes.
   4. Clearly states that the parent or guardian can revoke consent at any time and includes an email they can use to revoke consent.
3. Prohibits a covered organization from making enrollment or participation contingent on the parent waiving the privacy rights of their child.
4. Prohibits the covered organization from selling or sharing the covered information of a child for any reason.
5. Allows a parent or guardian to bring a civil action in a court of competent jurisdiction for a violation of this section.
6. If the parent or guardian prevails, they may be awarded the following relief:
   1. Up to $5,000 per child who had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Attorney's fees and costs.
   4. Any other relief the court deems appropriate.

COMMENTS

Whether it is music lessons, drama classes, sports leagues, summer camps, or simply after-school programs, participating in enriching and fun group activities is an important part of children's educational, emotional, social, and physical development. Frequently, organizations providing these activities promote their programs through websites, social media, and advertising materials using images, videos, and stories featuring participating children and teens.

Enrollment applications and releases for these programs have shifted to electronic forms in recent years. Whereas printed forms typically allowed parents and guardians to cross out any releases that they did not agree to, electronic forms often do not allow the same flexibility – making it very difficult for parents and guardians to prevent organizations from using their children's images and other personally identifying information in marketing materials. Parents and guardians who, for a variety of reasons, avoid publicly posting images of their children and their whereabouts, have found that they cannot opt out through electronic forms that they have to fill out. This leaves parents with a choice of either waiving their child's right to privacy or not allowing their children to participate in the activity.

This bill proposes to address this problem by requiring organizations to offer a separate release for children's images and other personally identifying information that enables parents to affirmatively consent to waive their children's privacy. In addition, the bill prohibits organizations from limiting participation or refusing attendance to the children of parents who have opted out. Finally, the bill enables parents and guardians to bring a civil action against violators.

According to the Author

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor's participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child's information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child's privacy while maintaining transparency and trust between youth organizations and the families they serve.

Arguments in Support

The California Federation of Teachers (CFT) writes in support:

The CFT — A Union of Educators & Classified Professionals, AFT, AFL-CIO, writes in support of Assembly Bill 2007 (Bauer-Kahan) as it would mandate that nonschool youth programs must obtain explicit parental consent before using any identifying information of minors for marketing purposes.

Arguments in Opposition

None on file.

FISCAL COMMENTS

Costs (Trial Court Trust Fund, General Fund) of an unknown but potentially significant amount to the trial courts to adjudicate civil actions brought by parents or guardians under the bill's private right of action. One hour of court time has an estimated cost of approximately $1,000; even a small number of contested cases reaching trial could generate court costs exceeding the $150,000 suspense threshold. Actual costs will depend on the number of cases filed and the amount of court time needed to resolve each case. It generally costs approximately $1,000 to operate a courtroom for one hour. Although courts are not funded on the basis of workload, increased pressure on the Trial Court Trust Fund may create a demand for increased funding for courts from the General Fund. The state budget provides annual General Fund backfills to the Trial Court Trust Fund to offset revenue reductions, totaling approximately $117.3 million in 2025-26.

The Legislative Analyst's Office recently warned of General Fund structural deficits of around $35 billion per year beginning in the 2027-28 fiscal year.

VOTES

ASM PRIVACY AND CONSUMER PROTECTION: 15-0-0

YES: Bauer-Kahan, Macedo, Bryan, DeMaio, Hoover, Irwin, Lowenthal, McKinnor, Ortega, Patterson, Pellerin, Petrie-Norris, Ward, Wicks, Wilson

ASM JUDICIARY: 12-0-0

YES: Kalra, Bauer-Kahan, Bryan, Connolly, Dixon, Harabedian, Johnson, Pacheco, Papan, Sanchez, Lee, Zbur

ASM APPROPRIATIONS: 15-0-0

YES: Wicks, Hoover, Aguiar-Curry, Calderon, Caloza, Dixon, Fong, Mark González, Krell, Pacheco, Pellerin, Sharp-Collins, Solache, Ta, Tangipa

UPDATED

VERSION: March 17, 2026

CONSULTANT: Julie Salley / P. & C.P. / (916) 319-2200 FN: 0002953

Date of Hearing: May 6, 2026

ASSEMBLY COMMITTEE ON APPROPRIATIONS

Buffy Wicks, Chair

ABPCA Bill Id:AB 2007

Author:(Bauer-Kahan) – As Amended Ver:March 17, 2026

Urgency: No State Mandated Local Program: No Reimbursable: No

SUMMARY:

This bill prohibits youth programs operating outside of public or private schools from using a youth’s image, likeness, or other identifying information for marketing purposes without express written or electronic consent from the youth’s parent or guardian, and prohibits making program enrollment contingent on providing that consent.

Specifically, this bill:

1. Prohibits a covered entity (a non-school youth program) from using a youth’s covered information, as provided, for any purpose, except as authorized by parental or guardian consent.
2. Authorizes use for marketing purposes, as provided.
3. Prohibits a covered entity from making enrollment or participation contingent on consent.
4. Prohibits a covered entity from selling or sharing a youth’s covered information for any reason, regardless of consent.
5. Authorizes a parent or guardian to bring a civil action against a violator and recover up to $5,000 per youth whose information was disclosed, injunctive or declaratory relief, attorney’s fees and costs, and any other relief the court deems appropriate.

FISCAL EFFECT:

Costs (Trial Court Trust Fund, General Fund) of an unknown but potentially significant amount to the trial courts to adjudicate civil actions brought by parents or guardians under the bill's private right of action. One hour of court time has an estimated cost of approximately $1,000; even a small number of contested cases reaching trial could generate court costs exceeding the $150,000 suspense threshold. Actual costs will depend on the number of cases filed and the amount of court time needed to resolve each case. It generally costs approximately $1,000 to operate a courtroom for one hour. Although courts are not funded on the basis of workload, increased pressure on the Trial Court Trust Fund may create a demand for increased funding for courts from the General Fund. The state budget provides annual General Fund backfills to the Trial Court Trust Fund to offset revenue reductions, totaling approximately $117.3 million in 2025-26.

The Legislative Analyst’s Office recently warned of General Fund structural deficits of around $35 billion per year beginning in the 2027-28 fiscal year.

COMMENTS:

1. Purpose. According to the author,

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor's participation does not come at the cost of their privacy… AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent.

1. Background. As enrollment and release forms for youth programs have shifted to electronic formats, parents who decline to authorize use of their children’s images or personal information for marketing purposes often find that the electronic forms do not allow opt-out — leaving them to choose between waiving their child’s privacy or forgoing the activity. The bill addresses this by requiring a stand-alone consent document, prohibiting participation-contingent consent, and creating a private right of action for violations. Penalties are calibrated per youth (rather than per publication or violation), capping exposure for organizations that publish a single youth’s information across multiple platforms.

Analysis Prepared by: Shiran Zohar / APPR. / (916) 319-2081

Date of Hearing: April 28, 2026

ASSEMBLY COMMITTEE ON JUDICIARY

Ash Kalra, Chair

ABPCA Bill Id:AB 2007

Author:(Bauer-Kahan) – As Amended Ver:March 17, 2026

proposed consent

SUBJECT: Youth programs: identifying information of youth

KEY ISSUE: should NON-SCHOOL youth programs be required to obtain explicit parental consent before using a youth’s personal information for marketing purposes?

SYNOPSIS

Parents and guardians are becoming increasingly concerned with their children’s digital footprints. When a child’s image, name, or other information is put on the internet it can lead to unintended consequences, including using those images to generate deep fake materials. Parents and guardians want to protect their children from these consequences, but not at the expense of participation in youth-focused programming, like sports leagues, camps, or other recreation activities. This bill would require organizations that offer these programs to obtain written or electronic consent from a parent or guardian before using a youth’s personal information, which includes image or likeness. The consent document needs to detail how and where the organization intends to use the personal information and inform parents and guardians that consent can be withdrawn at any time. This bill prohibits organizations from making participation in their programs contingent on providing consent and authorizes a private right of action for parents and guardians for any violation of the bill.

This bill is supported by CFT, a union of educators and classified professionals and has no opposition. This bill was passed unanimously by the Assembly Committee on Privacy and Consumer Protection.

SUMMARY: Requires non-school organizations that offer youth programming to obtain consent from parents or guardians for the use of a youth’s personal information and prohibits participation being contingent on providing that consent. Specifically, this bill:

1. Prohibits a covered entity from using a youth’s covered information for any purpose, except as provided in 2).
2. Allows a covered entity to use a youth’s covered information for a marketing purpose if the covered entity has obtained the express written or electronic signature of the parent or guardian of the youth on a notice that:
3. Communicates the requested uses of the youth’s covered information clearly and meaningfully, including a detailed list of all websites, brochures, or other materials or media where the covered entity is requesting to use the youth’s covered information;
4. Is contained in a single document or single internet website that is separate from enrollment forms, waivers of liability, and any other document;
5. Includes, in clear and understandable language, that the parent or guardian is providing consent for use of youth information for communications or marketing purposes and includes a detailed list of all types of communications or marketing purposes for which consent is sought;
6. Includes, in clear and understandable language, that the parent or guardian may revoke consent at any time and includes the email address to revoke that consent.
7. Prohibits a covered entity from making a youth’s enrollment or participation contingent upon a parent or guardian consenting to the use of the youth’s covered information for marketing purposes.
8. Prohibits a covered entity from selling or sharing a youth’s covered information, regardless of whether the parent or guardian consented to one of the uses in 2).
9. Authorizes a parent or guardian to bring a civil action for a violation of this bill. If successful in the action, allows for a parent or guardian to be awarded:
10. Up to $5,000 per youth who has their covered information disclosed;
11. Injunctive or declaratory relief;
12. Reasonable attorney’s fees and costs;
13. Any other relief the court deems appropriate.
14. Defines the following terms:
15. “Covered entity” means a program or activity offered primarily to youth outside of school hours, including periods when school is not in session, that is not operated by a public or private elementary or secondary school, that may include, but is not limited to, programs related to expanded learning, visual or performing arts, athletics, recreation, or educational enrichment.
16. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information, or any other identifying information.
17. “Marketing purposes” means promotions, newsletters, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
18. “Public or private elementary or secondary school” means either of the following:
19. An elementary or secondary school operated by the governing board of a school district or county office of education, or the governing body of a charter school; or
20. An elementary or secondary school that has filed an affidavit with the Superintendent of Public Instruction, and which reports a total enrollment of six or more students.

EXISTING LAW:

1. Provides that all people are, by nature, free and independent and have inalienable rights. Among these is the fundamental right to privacy. (California Constitution Article I, Section 1.)
2. States that the “right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution and that all individuals have a right of privacy in information pertaining to them.” Further states these findings of the Legislature:
3. The right to privacy is being threatened by the indiscriminate collection, maintenance, and dissemination of personal information and the lack of effective laws and legal remedies.
4. The increasing use of computers and other sophisticated information technology has greatly magnified the potential risk to individual privacy that can occur from the maintenance of personal information.
5. In order to protect the privacy of individuals, it is necessary that the maintenance and dissemination of personal information be subject to strict limits. (Civil Code Section 1798.1.)
6. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on businesses to respect those rights. (Civil Code Section 1798.100 et seq.)
7. Prohibits a business from selling or sharing the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of those who are between 13 and 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the information. (Civil Code Section 1798.120.)
8. Defines “personal information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household:
9. Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;
10. Characteristics of protected classifications under California or federal law;
11. Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
12. Biometric information;
13. Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement;
14. Geolocation data;
15. Audio, electronic, visual, thermal, olfactory, or similar information;
16. Professional or employment-related information;
17. Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act;
18. Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes;
19. Sensitive personal information.
20. “Personal information” does not include publicly available information or lawfully obtained, truthful information that is a matter of public concern.
21. “Publicly available” means any of the following:
22. Information that is lawfully made available from federal, state, or local government records;
23. Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media;
24. Information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience.
25. “Publicly available” does not mean biometric information collected by a business about a consumer without the consumer’s knowledge.
26. “Personal information” does not include consumer information that is deidentified or aggregate consumer information.
27. “Personal information” can exist in various formats, including, but not limited to, all of the following:
28. Physical formats, including paper documents, printed images, vinyl records, or video tapes;
29. Digital formats, including text, image, audio, or video files;
30. Abstract digital formats, including compressed or encrypted files, metadata, or artificial intelligence systems that are capable of outputting personal information. (Civil Code Section 1798.140.)
31. “Expanded learning” means before school, after school, summer, or intersession learning programs that focus on developing the academic, social, emotional, and physical needs and interests of pupils through hands-on, engaging learning experiences. It is the intent of the Legislature that expanded learning programs are pupil-centered, results driven, include community partners, and complement, but do not replicate, learning activities in the regular schoolday and school year. (Education Code Section 8482.1 (a).)
32. States that every child who is a dependent of the juvenile court shall be entitled to participate in age-appropriate extracurricular, enrichment, and social activities, including, but not limited to, access to computer technology and the Internet. A state or local regulation or policy shall not prevent, or create barriers to, participation in those activities. (Welfare and Institutions Code Section 362.05 (a)(1).)
33. Establishes the “reasonable and prudent parent standard” which means the standard characterized by careful and sensible parental decisions that maintain the health, safety, and best interests of a child while at the same time encouraging the emotional and developmental growth of the child, that a caregiver shall use when determining whether to allow a child in foster care under the responsibility of the state to participate in age or developmentally appropriate extracurricular, enrichment, cultural, and social activities. (Welfare and Institutions Code Section 362.05 (c)(1).)
34. Establishes the “Foster Youth Bill of Rights” that enumerates certain rights afforded to youth who are in the foster care system. Among those rights are specified privacy-related rights. (Welfare and Institutions Code Section 16001.9.)

FISCAL EFFECT: As currently in print this bill is keyed non-fiscal.

COMMENTS: Parents and guardians are becoming increasingly concerned with their children’s digital footprints. When a child’s image, name, or other information is put on the internet it can lead to unintended consequences, such as for deep fake materials. Parents and guardians want to protect their children from these consequences, but not at the expense of participation in youth-focused programming, like sports leagues, camps, or other recreation activities. According to the author:

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor’s participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child’s information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child’s privacy while maintaining transparency and trust between youth organizations and the families they serve.

Background. For any parent or guardian who has signed their child up for a camp, sports league, recreation outing, or any other youth-oriented program, they will likely have encountered a “photo release” waiver. Although the language may vary from waiver to waiver, generally, each of these waivers will request a parent or guardian waive their child’s right to privacy, so that the organization may use photographs or videos of the child in promotional materials. Understandably, these organizations would like to show images and videos of children enjoying their programming, so that others will want to sign up as well. In previous decades, when the main method of marketing for these organizations was print brochures or fliers, concerns over a child’s privacy, although warranted, were much more limited. In the digital age, concerns for children’s privacy are a primary focus of so many families. As the author writes:

There are very real dangers associated with having a child’s picture and identifying information on the internet. As artificial intelligence tools become more sophisticated their images and voice can be used to create deep fake materials that are intended to scam family members or to create child sexual abuse material. As parents and guardians become more aware of these dangers, more are attempting to opt out of signing the release.

When photo release waivers were in hard-copy format, parents or guardians could choose not to agree to portions of, or the entire waiver. But with registration for youth-focused programming shifting to a predominantly online format, parents or guardians are often left without the option to withhold consent to these waivers. Many of the online registration platforms will not allow for registration to be completed, unless the parent or guardian checks a box, waiving their child’s right to privacy. As the bill’s author points out, for foster children and parents, this challenge can be even greater. Even if the foster parent wanted to consent to the waiver, certain jurisdictions and courts do not allow for publication—whether digital or in print—of a foster child’s image. This can prevent foster children from participating in programs that require a waiver.

This bill would require organizations that offer youth-serving programming to provide a parent or guardian with a stand-alone release document that details specifically how and where a youth’s information is intending to be used, and that the parent or guardian may revoke their consent at any time. Additionally, this bill prohibits organizations from making participation in programming contingent on a parent or guardian waiving their child’s privacy rights and prohibits the organization from sharing or selling of the child’s covered information.

As an enforcement mechanism, this bill allows for a parent or guardian to bring a civil action against violators. If successful, the parent or guardian can be granted up to $5,000 per youth that has their personal information or likeness improperly disclosed. Although organizations may be concerned about unintentional actions leading to penalties, because the bill makes the penalties per youth, and not per violation, it appropriately limits penalties. For instance, if an organization publishes a youth’s photo on a social media site, on the organization’s homepage, and in a flier, because the bill’s language is “per youth”, the organization’s penalty would only be up to $5,000, as opposed to the potential for up to $15,000 for three separate violations (for each publication). As written, the bill’s language seems like a reasonable and balanced enforcement mechanism.

ARGUMENTS IN SUPPORT: This bill is supported by CFT, which writes in support:

The CFT — A Union of Educators & Classified Professionals, AFT, AFL-CIO, writes in support of Assembly Bill 2007 (Bauer-Kahan) as it would mandate that nonschool youth programs must obtain explicit parental consent before using any identifying information of minors for marketing purposes.

REGISTERED SUPPORT / OPPOSITION:

Support

CFT – a Union of Educators & Classified Professionals, AFT, AFL-CIO

Opposition

None on file

Analysis Prepared by: Manuela Boucher and Griff Ryan-Roberts / JUD. / (916) 319-2334

Date of Hearing: March 25, 2026

Fiscal:

ASSEMBLY COMMITTEE ON PRIVACY AND CONSUMER PROTECTION

Rebecca Bauer-Kahan, Chair

ABPCA Bill Id:AB 2007 (

Author:Bauer-Kahan) – As Amended Ver:March 17, 2026

SUBJECT: Youth programs: identifying information of youth

SYNOPSIS

Whether it is music lessons, drama classes, sports leagues, summer camps, or simply after-school programs, participating in enriching and fun group activities is an important part of children’s educational, emotional, social, and physical development. Frequently, organizations providing these activities promote their programs through websites, social media, and advertising materials using images, videos, and stories featuring participating children and teens.

Enrollment applications and releases for these programs have shifted to electronic forms in recent years. Whereas printed forms typically allowed parents and guardians to cross out any releases that they did not agree to, electronic forms often do not allow the same flexibility – making it very difficult for parents and guardians to prevent organizations from using their children’s images and other personally identifying information in marketing materials. Parents and guardians who, for a variety of reasons, avoid publicly posting images of their children and their whereabouts, have found that they cannot opt out through electronic forms that they have to fill out. This leaves parents with a choice of either waiving their child’s right to privacy or not allowing their children to participate in the activity.

This bill proposes to address this problem by requiring organizations to offer a separate release for children’s images and other personally identifying information that enables parents to affirmatively consent to waive their children’s privacy. In addition, the bill prohibits organizations from limiting participation or refusing attendance to the children of parents who have opted out. Finally, the bill enables parents and guardians to bring a civil action against violators.

If passed by this Committee, this bill will next be heard by the Judiciary Committee.

EXISTING LW:

1. Provides, pursuant to the California Constitution, that all people are by nature free and independent and have inalienable rights. Among these is the fundamental right to privacy. (Cal. Const. art. I, § 1.)
2. States that the “right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution and that all individuals have a right of privacy in information pertaining to them.” Further states these findings of the Legislature:
   1. The right to privacy is being threatened by the indiscriminate collection, maintenance, and dissemination of personal information and the lack of effective laws and legal remedies.
   2. The increasing use of computers and other sophisticated information technology has greatly magnified the potential risk to individual privacy that can occur from the maintenance of personal information.
   3. In order to protect the privacy of individuals, it is necessary that the maintenance and dissemination of personal information be subject to strict limits. (Civ. Code § 1798.1.)
3. Establishes the California Consumer Privacy Act (CCPA), which grants consumers certain rights with regard to their personal information, including enhanced notice, access, and disclosure; the right to deletion; the right to restrict the sale of information; and protection from discrimination for exercising these rights. It places attendant obligations on organizations to respect those rights. (Civ. Code § 1798.100 et seq.)
4. Prohibits an organization from selling or sharing the personal information of consumers if the organization has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of those who are between 13 and 16 years of age, or the consumers parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the information. (Civ. Code § 1798.120.)
5. Defines “personal information” under the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The CCPA provides a nonexclusive series of categories of information deemed to be personal information, including biometric information, geolocation data, and “sensitive personal information.” (Civ. Code § 1798.140(v)(1).)
6. Defines “expanded learning” as before school, after school, summer, or intersession learning programs that focus on developing the academic, social, emotional, and physical needs and interests of pupils through hands-on, engaging learning experiences. (Ed. Code § 8482.1.)
7. Establishes the “Foster Youth Bill of Rights” that enumerates certain rights afforded to youth who are in the foster care system. Among those rights is the right to self-determination, privacy, and confidentiality. (Welf. & Inst Code § 16001.9.)
8. States that every child who is a dependent of the juvenile court shall be entitled to participate in age-appropriate extracurricular, enrichment, and social activities, including, but not limited to, access to computer technology and the Internet. A state or local regulation or policy shall not prevent, or create barriers to, participation in those activities. (Welf. & Inst. Code § 362.05 (a)(1).)
9. Establishes the “reasonable and prudent parent standard” which means the standard characterized by careful and sensible parental decisions that maintain the health, safety, and best interests of a child while at the same time encouraging the emotional and developmental growth of the child, that a caregiver shall use when determining whether to allow a child in foster care under the responsibility of the state to participate in age or developmentally appropriate extracurricular, enrichment, cultural, and social activities. (Welf. & Inst. Code § 362.05 (c)(1).)

THIS BILL:

1. Defines the following:
   1. “Covered entity” means a program or activity offered primarily to youth outside of school hours, including periods when school is not in session that is not operated by a public or private elementary or secondary school. These programs may be related to expanded learning, visual and performing arts, athletics, recreation, or educational enrichment.
   2. “Covered information” means a picture, video, audio recording, likeness, attributed statement, personal information, or any other identifying information.
   3. “Expanded learning” means before or after school, summer or intersession learning programs that focus on developing the academic, social, emotional, and physical needs and interests of children through engaging, hands-on learning experiences.
   4. “Marketing purposes” means promotions, newsletter, brochures, social media, or other public-facing materials that describe the programs or solicit participation.
   5. “Public or private elementary or secondary school” means either of the following:
      1. An elementary or secondary school operated by the governing board of a school district or county office of education, or the governing body of a charter school.
      2. An elementary or secondary school that has filed an affidavit with the Superintendent of Public Instruction and reports a total enrollment of six or more students.
2. Requires covered organizations that provide extracurricular activities for children and wish to use their covered information for marketing to obtain express consent from the child’s parent or guardian on a notice that complies with the following:
   1. Communicate in a clear manner the requested uses of the child’s information, including a detailed list of websites, brochures, and other materials or media where the child’s information might be used.
   2. It is contained in a single document or single internet website that is separate from enrollment forms or any other documents.
   3. Includes in clear and understandable language that the parent or guardian is providing consent for the use of the child’s information for communication or marketing purposes.
   4. Clearly states that the parent or guardian can revoke consent at any time and includes an email they can use to revoke consent.
3. Prohibits a covered organization from making enrollment or participation contingent on the parent waiving the privacy rights of their child.
4. Prohibits the covered organization from selling or sharing the covered information of a child for any reason.
5. Allows a parent or guardian to bring a civil action in a court of competent jurisdiction for a violation of this section.
6. If the parent or guardian prevails, they may be awarded the following relief:
   1. Up to $5,000 per child who had their covered information disclosed.
   2. Injunctive or declaratory relief.
   3. Attorney’s fees and costs.
   4. Any other relief the court deems appropriate.

COMMENTS:

1) Author’s statement. According to the author:

Youth programs play an important role in supporting children and families, and parents should be able to trust that a minor’s participation does not come at the cost of their privacy. Families participate in programs expecting a safe and supportive environment, not anticipating that images of their children could later be used in public-facing content without their knowledge or consent. AB 2007 requires youth-serving organizations to obtain written or electronic consent from a parent or guardian before using photos, videos, and other identifying information of minors for marketing purposes. AB 2007 further prohibits youth programs from making enrollment or participation contingent upon consent. By ensuring parents and guardians have the opportunity to review and approve how their child’s information is used, AB 2007 establishes a simple and commonsense safeguard that protects a child’s privacy while maintaining transparency and trust between youth organizations and the families they serve.

2) The problem this bill is trying to solve. As registration materials and parental releases have moved to electronic formats, parents who are not willing to waive their child’s right to privacy as a cost of participation have found that they cannot opt out through the electronic form that they have to fill out. This often leaves parents with a choice of either relenting and waiving their child’s right to privacy or not allowing their child to participate in the activity.

One parent shared an example of the following release that was contained in the waiver document from a local youth soccer league for elementary school age children:

The undersigned further hereby permits and authorizes the XX Youth Soccer Club and its agents, sponsors and others acting on its behalf, to use, reproduce and/or publish photographs and/or video that may pertain to the above-named child/children, including their image, likeness and/or voice, without compensation.

I understand that this material may be used in various publications, public relations or marketing releases, recruiting materials or for other endeavors specifically related to promotion of the sport of soccer. This material may also appear on the Club’s internet website or Facebook page. This authorization is continuous and may only be withdrawn by my specific rescission of this authorization. Consequently, the Club may publish materials, use my child’s/childrens’ name, photograph and/or make reference to my child/children in any manner that the Club deems appropriate in order to promote or publicize itself and its endeavors in relation to growing the sport of soccer in California.

Another parent recently reported an art camp program because they wanted to decline the following release that was part of an all-in-one release form:

By checking box this release, the undersigned understands and agrees that photographs may be taken during the programs and the undersigned hereby gives permission to have his/her/minor child's photo taken and authorizes the use and reproduction of said photos by X. All photos and negatives taken at any program become the sole property of X Art and may be used for promotional handouts and on our website. If the participant(s) is a minor under the age of 18, his/her parent or legal guardian authorizes the use of the photos as stated above.^[1]

The art camp responded: “Thank you for reaching out. While we appreciate your interest, I do not believe our camp is a good fit.”

3) Reasons parents may want to protect their children’s digital identity. There are many reasons why parents or guardians may wish to opt out of the sharing of their children’s images or personal information to preserve their children’s privacy. It may be as simple as deciding to allow their children to make decisions about their online presence when they are older or protecting their child from identity theft or online harassment.

There are also risks associated with having a child’s picture and identifying information on the internet. As artificial intelligence (AI) tools become more sophisticated, children’s images and voice can be used to create deepfake materials that are intended to scam family members or to create child sexual abuse material. As parents and guardians become more aware of these dangers, more are attempting to opt out of signing these releases.

Along with parental concerns about images of their children being used to create online sexual abuse material, there are other dangers parents and children may face. For example, it may be that a family has had to move to get away from an abusive, noncustodial parent or an abusive partner. Posting personal information on the internet about those children may lead to the noncustodial parent locating their child. In addition, in a country that has become increasingly volatile, parents who are public figures may wish to protect their children by keeping them from having a digital presence. Similarly, immigrant parents may want to enroll their children in enrichment programs but do not feel safe having that program advertise that their children are participating due to fears of federal immigration control and enforcement (ICE) agents finding their child.

The privacy of children in the child welfare system. For foster parents, the situation can be even more complicated. The state has an expectation that children in care be allowed to participate in the same activities as any other child. They ask foster parents to use a “reasonable and prudent parent standard” when making decisions about the children in their care. This standard includes making decisions about extracurricular activities and the posting of children’s pictures and personal information online. Parents posting information about the children on the internet is not against the law, so long as the children are not identified as being in the child welfare system.

However, several local jurisdictions and courts do not allow for the posting of images of children in care online, in print materials, or anywhere else. Reasons for these restrictions could range from simply requiring that the privacy and confidentiality of a child in care be protected to dangers the child might face from their birthparents or other family members if their location is disclosed. In those cases, foster parents cannot waive that right for their children and therefore are limited in the activities that those children can participate in if the organization does not provide a means to opt out of participation.

Regardless of the specific reason for the parent or guardians’ decision, all Californians have a fundamental right to privacy, including children. According to the author, waiving that right should not be part of the price parents have to pay for their children to have access to extracurricular activities.

3) What this bill would do. This bill would require that organizations providing extracurricular activities outside of school hours obtain express consent from parents or guardians before using images, video, or other personal information of their children for marketing purposes. Specifically, those organizations will be required to:

1. Provide a separate release from any other enrollment forms and releases the parents are required to sign allowing parents to decide to consent or not.
2. Clearly explain on the release form exactly how the children’s information will be used and on what websites it will be shared.

Organizations will be prohibited from:

1. Making enrollment and participation contingent upon a parent or guardian granting the organization the right to use their child’s image or other identifying information for marketing purposes.
2. Sharing or selling children’s images and information regardless of whether a parent has authorized its use for marketing.

If an organization violates the provisions, the bill allows parents to file a civil action against the organization and if they prevail, they may receive up to $5,000 per child, reasonable attorney fees, injunctive relief, and any other relief the court finds appropriate.

REGISTERED SUPPORT / OPPOSITION:

Support

None on file.

Opposition

None on file.

Analysis Prepared by: Julie Salley / P. & C.P. / (916) 319-2200

1. Examples of releases were provided by parents who have raised concerns about this practice. ↑