Privacy in California for first responders

What protects you in California

California gives sworn officers, judges, and prosecutors a real lever. Government Code §7923.601 (recodified from the old §6254.21) lets you submit a written request to keep your home address and home phone out of any record an agency would otherwise release under the Public Records Act. Once the request is on file, the agency is legally barred from disclosing those fields. It applies to active and retired alike.

The DMV gets the same treatment under Vehicle Code §1808.4. File a confidentiality request and your driver's license and vehicle records stop showing your home address to anyone running a plate or pulling a record. Active personnel get the protection while employed plus three years. Retired peace officers get it permanently on request, the only state-level DMV protection in the country that doesn't expire.

The 2024 Delete Act (Civil Code §1798.99.80) gives every Californian, officer or not, the right to demand brokers delete their personal information. Forty-five-day compliance window. Not officer-specific, but it works against the broker layer that the agency-side carve-outs miss.

Who Vehicle Code §1808.4 actually covers

The §1808.4 covered list is long and worth knowing because the categories often miss. The statute names:

• Active and retired peace officers (Penal Code §830 categories)
• District attorneys, public defenders, and their investigators
• State and federal judges, court commissioners, magistrates
• Federal prosecutors and federal criminal investigators
• National Park Service rangers
• Department of Corrections and Rehabilitation employees, sworn or nonsworn, who supervise inmates
• Parole officers and probation officers
• Code enforcement officers
• City attorneys and deputy city attorneys
• DOJ attorneys and AG investigators
• Active duty military reservists working in law enforcement capacity
• Federal Reserve police
• Animal control officers (since 2019 expansion)
• Reproductive health-care providers (since 2022 expansion)
• Spouses and minor children of all of the above
• Surviving spouses of peace officers killed on the job

Eligibility verification runs through the employing agency for active personnel. Retirees verify through pension records or a letter from the former agency. The DMV processes through Form INF 70 plus agency certification. Allow 30-60 days for the flag to populate downstream systems.

Permanent for retirees, the §1808.4 specific you should not miss

Most state-level DMV confidentiality programs sunset when you leave the job. California §1808.4 doesn't, for retired peace officers. File once, and the flag stays on your record for life. That's the single most valuable carve-out in California for a 20-and-out cop. A retired officer who never files leaves the data open in DMV records for the rest of their life. A retired officer who files once is covered forever.

Active officers get coverage while employed plus three years post-termination. Spouses and minor children get coverage during the officer's coverage window. If you're approaching retirement, the §1808.4 retirement filing should be on your separation checklist.

Safe at Home, what it does for officers

Safe at Home (Gov. Code §§6205-6211, run by the Secretary of State) is a substitute-address program. You enroll, the state assigns you a P.O. Box address, and every state and local agency must use the substitute address in place of your real one. Mail forwards to your real address through the program.

Eligibility is limited. The standard categories are:

• Victims of domestic violence, sexual assault, or stalking
• Victims of human trafficking
• Victims of elder or dependent adult abuse
• Reproductive health workers (added 2021)
• Public officials with credible threats (added 2024 expansion)

Officers are not categorically eligible the way Texas or California public-records exemptions assume. An officer who is also a victim of stalking, sexual assault, or has a credible threat against them can enroll. Most working cops won't qualify by job alone. The §7923.601 and §1808.4 paths are the primary tracks for officers, Safe at Home is the third lever for those with a documented threat.

Enrollment runs through the SoS portal at sos.ca.gov/registries/safe-home, with verification through a designated assisting agency, your local DV shelter, victim advocate, or law enforcement.

§6254.21 versus §6254.24, when each applies

Two old citations still float around online. Here's the practical mapping after the 2021 recodification:

• Gov. Code §7928.300 (formerly §6254.21) bars public posting of officer home address and phone on agency websites without written consent. This is the statute that handles the agency-side disclosure path. File a written request with each agency that holds your address. The duty to redact attaches once the request is on file.
• Gov. Code §7928.305 (formerly §6254.24) bars disclosure of home addresses and phone numbers of state employees, including peace officers, in response to a CPRA request. This is the statute that defends against a public-records request from a third party.

The two work together. §7928.300 stops the agency from posting your data proactively. §7928.305 stops the agency from releasing it in response to a CPRA request from a stranger. Both apply automatically once you file the §7923.601 designation. The old §6254.21 cite still appears in older agency forms, it's the same protection, recoded.

The Delete Act, mechanics

The 2024 Delete Act gives Californians a single-portal delete request that registered data brokers must honor within 45 days. The CPPA portal goes live in 2026, and registered brokers must process incoming delete requests against every record the broker holds tied to the requester. Re-listing is permitted only if the consumer affirmatively opts back in.

Penalties for non-compliance run through the California Privacy Protection Agency. The CPPA is also publishing the broker registry, which gives officers a usable list of who must comply. The Delete Act doesn't carry the per-violation statutory damages that Daniel's Law does, the enforcement model is administrative, not private. But for a California officer, it adds a fourth lever on top of §7923.601, §1808.4, and Safe at Home.

What still leaks

Three big sources stay open even with all the state-level protections in place:

1. County property records. Deed transfers, tax assessments, and mortgage filings are recorded by 58 county assessors and recorders. They publish online, and the brokers scrape them. Buying or selling a home in California puts your address into the broker pipeline within weeks. There is no statewide officer-property-records redaction, individual counties have varying processes.
2. Voter registration. California voter rolls are not public to the general public, but they are available to candidates, parties, and certain researchers, and the data leaks downstream into commercial broker feeds. Opt your name to a confidential designation under Elections Code §2166 through your county registrar.
3. Out-of-state and commercial brokers. Spokeo, Whitepages, BeenVerified, and the rest don't care about §7923.601. They source from public-record aggregators outside California and from commercial data they buy. The state shield doesn't reach them, the Delete Act does, but only against registered brokers.

A 2026 case study, the LAPD/LA city attorney hack

In April 2026, a hack of the Los Angeles city attorney's office leaked thousands of LAPD records, including personnel files and internal affairs investigations, per LA Times and Fox 11 Los Angeles. Officers who had filed §7923.601 designations had agency-side disclosure paths shut, but the hack pulled data that bypassed those protections entirely. The lesson: the state shield protects against lawful disclosure paths. It does not protect against breach. Officers in California with §7923.601 on file still need broker-side scrubbing because the breach data, once leaked, flows into the broker layer the agency shield doesn't reach.

The same pattern holds for the Hennepin County 2020 first-responder leak and the Anchorage PD traffic-reports exposure, agency-side protections didn't help because the data was extracted, not requested. Defense in depth means broker scrubbing on top of the statutory designations.

Laws that work for you here

• Government Code §7923.601 / §7928.300 — file a written request with each agency that holds your address. Once on file, the agency cannot release it under a CPRA request. (These sections replace the old §6254.21 cite that still floats around online.)
• Vehicle Code §1808.4 — file with the DMV via Form INF 70. Active and retired peace officers, judges, prosecutors, parole officers, code enforcement, DA investigators, federal prosecutors, NPS rangers, and spouses/children of covered persons are eligible. Retired peace officers get permanent confidentiality on request.
• Safe at Home (Gov. Code §§6205-6211) — substitute address program run by the Secretary of State. Eligible if you're a victim of domestic violence, stalking, sexual assault, human trafficking, elder abuse, or (since 2021) a reproductive-health worker. Public officials with credible threats added 2024.
• Delete Act (Civil Code §1798.99.80 et seq.) — every California resident can demand a registered data broker delete their personal information. 45-day compliance window. Not first-responder-specific, but it works against most major people-search sites. Use it.
• Elections Code §2166 — confidential voter registration on application. File with your county registrar.

What about retirees, families, non-LE first responders, federal officers

Retired peace officers. §1808.4 is permanent on request. §7923.601 covers retired peace officers, judges, and prosecutors the same way it covers active. File both, separation is the cleanest time to do it.

Families. §1808.4 covers spouses and minor children during the officer's coverage window. §7923.601 covers spouses living at the same residence on a per-request basis. Surviving spouses of peace officers killed on the job have permanent §1808.4 protection.

Firefighters and EMS. Firefighters get §7923.601 coverage on application. EMS personnel are not categorically covered under §1808.4 but can request DMV confidentiality through the standard CHP process.

Federal officers. Federal prosecutors, criminal investigators, and NPS rangers are explicitly covered under §1808.4. Federal judges sitting in California are covered under §7923.601 and the federal Lieu Act.

What we sweep that the state doesn't

The state laws shield agencies. We handle the brokers. We file CCPA delete requests on the brokers that honor California law and standard opt-outs on the 200+ broker sites that publish your address regardless of state. We re-check every two weeks because re-listings happen, and breach-driven re-listings happen faster than scrape-driven ones. The Safe at Home and §7923.601 designations stop the agency disclosure path. We close the broker path that runs around it.