California AB 1242 (Reproductive Health Data Sharing)

What AB 1242 actually does

AB 1242 is a shield law. The headline part is straightforward: California LE agencies can't use California resources to help out-of-state investigations of people who got, gave, or helped someone get reproductive health care that's legal in California.

The piece that matters here is the data-sharing carve-out.

Under Cal. Penal Code §13778.2, California LE agencies are prohibited from sharing personal data with out-of-state agencies in covered cases. That's not a consumer privacy law. It's a restriction on cop-to-cop information sharing across state lines. If you're a CA detective and a Texas department asks for someone's address, vehicle, or phone number tied to an abortion-related investigation, the statute says no.

The bill passed in 2022 and took effect January 1, 2023.

Who it protects

The protected class is people in California who:

• Received reproductive health care that's legal in California
• Provided that care (clinic staff, physicians, nurses, security)
• Assisted with that care (drove someone, paid for it, scheduled it, escorted)

The data-sharing carve-out incidentally affects California LE personnel as well — but in a different way. It doesn't shield you from doxxing. It limits your agency's obligations to ship your records, or anyone else's records, across state lines in a covered case.

So if you're a CA officer and you're worried about your name showing up in an out-of-state file because you assisted a family member, this statute is part of the protection that exists. Most of you won't trip it. The narrow case is the relevant one.

How to invoke

You don't.

This isn't an opt-out form. It isn't a registration. It's a restriction on your employer agency's behavior. The statute operates whether or not anyone invokes it.

Practical situations where it shows up:

1. An out-of-state agency requests records on a covered case. Your records unit declines or redacts under the statute. Your name as a responding officer doesn't get shared.
2. An out-of-state grand jury subpoena lands. Your legal advisor analyzes it under §13778.2 and decides whether to comply, comply in part, or move to quash.
3. A multi-state task force seeks data tied to a covered investigation. Same analysis, agency-by-agency.

If you're working a case and you get a request from out of state that seems to touch reproductive health care, the right move is to push it to your supervisor and your agency's legal counsel. The statute is the legal hook they'll use.

Where it does and doesn't reach

What it covers:

• Personal data held by CA LE agencies
• Data-sharing requests from out-of-state LE
• Investigations into reproductive health care that's legal in California

What it doesn't cover:

• Data brokers and commercial data sources. Spokeo, Whitepages, BeenVerified, and the rest aren't agencies. They aren't bound by this statute.
• Federal investigations. The statute is structured around interstate cooperation between state and local agencies. Federal requests run on a different track.
• Investigations into care that wasn't legal in California. The statute covers the legal-in-CA piece — it doesn't shield broader misconduct.
• Your personal information sitting in commercial databases. AB 1242 is agency-side. It does nothing about the broker exposure that's the actual privacy threat for first responders.

Why this matters for first responder privacy

AB 1242 is one of the cleanest examples of California restricting cop-to-cop data flow at the state line. That direction matters.

For your home address, phone, family info — the things data brokers expose — AB 1242 does almost nothing directly. Brokers aren't agencies. The statute doesn't touch them.

What it tells you is the legislative direction. California is willing to put data-sharing restrictions on its own LE agencies when it decides the underlying conduct is protected. SB 345 (the gender-affirming care version) followed in 2024. Expect more of these.

For the actual privacy threat — your address being sold by 200-plus brokers — the relevant California tools are the Delete Act and DROP platform, Vehicle Code §1808.4, and Government Code §6254.21.

How CA agencies were trained

Agency training bulletins make the operational picture clear. The Culver City PD January 2025 training bulletin covers AB 1242 and SB 345 together and walks officers through how to handle out-of-state requests. Most CA agencies issued similar guidance in 2023 and updated it in 2025.

The takeaways from those bulletins:

• Out-of-state requests on covered cases get routed to the agency's legal advisor, not handled at the line level.
• Officers shouldn't volunteer information to out-of-state agencies on covered topics.
• Personal-data sharing across state lines in covered cases is the specific behavior the statute prohibits.

What we do

AB 1242 is agency-side. We don't file under it on your behalf — there's nothing for an individual to file. What we do is the broker layer. We sweep 200-plus broker sites every two weeks, send opt-outs, and re-notice when a broker re-lists you. The agency-side protections like AB 1242 close one path. We close the other one.

If you're a CA first responder, the practical move is to submit your DROP request and run a free scan to see what's still live in the broker layer.