California AB 1242 (Reproductive Health Data Sharing)
What it does, who it protects, and how to invoke it. Plain English.
Who it protects
People in California who seek, provide, or help with reproductive health care that is legal in California. The data-sharing restriction also limits what California law enforcement agencies can hand over to out-of-state agencies in covered investigations.
What it does
Bars California law enforcement agencies from cooperating with, or sharing personal information for, out-of-state investigations into reproductive health care that is legal in California.
How to invoke it
This is not a personal opt-out. It is a restriction on how a California agency shares data. Officers do not file anything; the law constrains their employer agency's data-sharing behavior. If out-of-state law enforcement asks a California agency for personal data on a covered case, the statute is the legal basis to refuse.
Enforcement reality
Enforcement is internal and administrative, not a criminal penalty against the individual officer. California agencies have trained officers on the prohibition through formal training bulletins, such as Culver City PD's January 2025 bulletin. In practice it runs through agency policy. For first responder privacy, the personal-data prohibition signals that California is willing to limit agency-side data sharing, not just consumer-facing data.
What AB 1242 does
AB 1242 is a shield law. California law enforcement agencies cannot use state resources to help out-of-state investigations of people who received, provided, or helped someone get reproductive health care that is legal in California.
The part that matters for first responder privacy is the data-sharing restriction.
Under California Penal Code §13778.2, a state or local agency cannot cooperate with or provide information to an out-of-state agency about reproductive health care that is legal in California. That is not a consumer privacy law. It restricts information sharing between agencies across state lines. If a California detective gets a request from a Texas department for someone's address, vehicle, or phone tied to an abortion-related investigation, the statute directs the California agency to withhold it.
The bill was signed in September 2022 and took effect January 1, 2023.
Who it protects
The protected group is people in California who:
- Received reproductive health care that is legal in California
- Provided that care, including clinic staff, physicians, nurses, and security
- Assisted with that care, such as driving someone, paying for it, scheduling it, or escorting
The data-sharing restriction also touches California law enforcement personnel, in a narrower way. It does not shield you from doxxing. It limits your agency's obligation to send your records, or anyone else's, across state lines in a covered case.
If you are a California officer worried about your name surfacing in an out-of-state file because you helped a family member, this statute is part of the protection that exists. The situation is narrow, but it is the relevant one.
How to invoke it
There is nothing for an individual to file. This is not an opt-out form or a registration. It restricts your employer agency's behavior, and it operates whether or not anyone invokes it.
Where it shows up in practice:
- An out-of-state agency requests records on a covered case. Your records unit declines or redacts under the statute, and your name as a responding officer is not shared.
- An out-of-state grand jury subpoena arrives. Your legal advisor analyzes it under §13778.2 and decides whether to comply, comply in part, or move to quash.
- A multi-state task force seeks data tied to a covered investigation. The same analysis runs, agency by agency.
If a request from out of state seems to touch reproductive health care, route it to your supervisor and your agency's legal counsel. The statute is the legal basis they will use.
Where it reaches, and where it doesn't
What it covers:
- Personal data held by California law enforcement agencies
- Data-sharing requests from out-of-state law enforcement
- Investigations into reproductive health care that is legal in California
What it does not cover:
- Data brokers and commercial data sources. Spokeo, Whitepages, BeenVerified, and the rest are not agencies, so this statute does not bind them.
- Federal investigations. The statute is built around cooperation between state and local agencies, and federal requests run on a different track.
- Investigations into care that was not legal in California. The statute covers the legal-in-California piece and does not shield broader conduct.
- Your personal information sitting in commercial databases. AB 1242 is agency-side and does nothing about the broker exposure that is the real privacy threat for first responders.
Why this matters for first responder privacy
AB 1242 is a clear example of California restricting data flow between its own agencies and out-of-state ones at the state line.
Your home address, phone number, and family information are the data that brokers expose. Against that, AB 1242 does almost nothing directly. Brokers are not agencies, and the statute does not touch them.
What it shows is legislative direction. California is willing to put data-sharing restrictions on its own agencies when it decides the underlying conduct is protected. SB 345 extended similar shield protections to reproductive and gender-affirming care and took effect in 2024.
For the privacy threat that actually affects you, your home address being sold by data brokers, the relevant California tools are the Delete Act and DROP platform, Vehicle Code §1808.4, and Government Code §7928.205.
How California agencies were trained
Agencies have put out training bulletins on the law. Culver City PD published a January 2025 training bulletin covering AB 1242 and SB 345 together. We have not reviewed its internal instructions firsthand, so we do not reproduce them here.
The practical direction follows from the statute itself: an out-of-state request that appears to touch reproductive health care goes to the agency's legal advisor, not the line level.
What we do
AB 1242 is agency-side, and there is nothing for an individual to file under it. What we handle is the broker layer. We scan data broker sites on a recurring basis, file opt-outs, and file again when a broker re-lists you. We handle most of that process and tell you clearly when a site needs something from you. Agency-side protections like AB 1242 close one path. The broker layer is the other one.
If you are a California first responder, use California's Delete Act and DROP platform and run a free scan to see what is still live in the broker layer.