Privacy in California for first responders

What protects you in California

California gives sworn officers, judges, and prosecutors real tools to keep their home address out of public records. The strongest are a Public Records Act exemption, DMV confidentiality, and the Delete Act. Firefighters, EMS, and family members have narrower options, covered further down.

Under Government Code §7928.300 (recodified from the old §6254.21), the home address and home phone number of a public agency employee, including a peace officer, are not public records. An agency cannot release them in response to a California Public Records Act request. Peace officers can also file a written request tied to their personnel records under §7923.601. The protection covers active and retired personnel alike.

You may still see the old §6254.21 citation on agency forms; the 2021 recodification renumbered it, but the underlying home-address protection is the same. A related citation, §6254.24, is a separate protection — the Public Safety Officials Home Protection Act, which bars agencies from posting your home address online and lets you demand takedown — recodified on its own track, not into §7928.300. File the written request with every agency that holds your address, because the duty to withhold attaches once your request is on file.

Who Vehicle Code §1808.4 covers

DMV records are the other main lever. Under Vehicle Code §1808.4, you can ask the DMV to withhold your home address so it does not show when someone runs your plate or pulls your record. You submit the request through your employing agency, which forwards it to the DMV. Allow several weeks for the confidentiality flag to take effect.

The covered list is broader than most people assume. It includes:

• Active and retired peace officers (Penal Code §830 categories)
• District attorneys, public defenders, and their investigators
• State and federal judges and court commissioners
• Federal prosecutors and federal criminal investigators
• Parole and probation officers
• City attorneys and Department of Justice attorneys and investigators
• Corrections employees who supervise inmates
• National Park Service rangers
• Spouses and minor children of the above
• Surviving spouses of peace officers killed on the job

The statute's full list is longer. Confirm your category with your agency before you rely on it.

Coverage timing depends on status. Active personnel are covered while employed and for three years after leaving. Spouses and minor children are covered during the officer's coverage window.

Permanent confidentiality for retired peace officers

Retired peace officers get one protection that does not expire. Under §1808.4, a retired peace officer can request that the DMV withhold their home address permanently. File once and the flag stays on your record after retirement, with no renewal required. Most state DMV confidentiality programs end when you leave the job. This one does not, for retired peace officers.

If you are approaching retirement, put the §1808.4 filing on your separation checklist. Surviving spouses of peace officers killed on the job also qualify for permanent confidentiality.

Safe at Home

Safe at Home (Government Code §§6205-6211), run by the Secretary of State, is a substitute-address program. You enroll, the state assigns you a substitute mailing address, and every state and local agency must use it in place of your real one. Your mail forwards to your real home.

Eligibility is limited. It covers:

• Victims of domestic violence, sexual assault, or stalking
• Victims of human trafficking
• Victims of elder or dependent-adult abuse
• Reproductive health-care workers (added 2021)
• Public-entity employees who face threats, violence, or harassment because of their work (added 2024)

The 2024 expansion matters for officers. A peace officer who has been threatened or harassed because of the job may now qualify as a public-entity employee. There is still no automatic eligibility by job title alone; you have to show the threat or harassment. For most officers, the Public Records Act exemption and §1808.4 remain the primary tracks, with Safe at Home as a stronger option once a documented threat exists.

Enroll through the Secretary of State's portal, with help from a designated enrolling agency such as a domestic-violence shelter, victim advocate, or law enforcement agency.

The Delete Act

The Delete Act (Civil Code §1798.99.80, passed as SB 362 in 2023) lets any Californian require registered data brokers to delete their personal information. It runs through a single state-run portal called DROP, built by the California Privacy Protection Agency.

Consumers can submit deletion requests through DROP as of 2026. Registered brokers must check the portal at least every 45 days, match each request against their records, and delete the data unless a legal exception applies, with these obligations phasing in during 2026. Enforcement is administrative, handled by the agency, not through private lawsuits the way Daniel's Law works in New Jersey. The agency also publishes the broker registry, which gives you a usable list of who has to comply.

The Delete Act is not officer-specific, but it reaches the broker layer the agency-side exemptions miss. For a California officer, it adds a fourth tool on top of the Public Records Act exemption, §1808.4, and Safe at Home.

What still leaks

Even with every state protection in place, some sources stay open.

1. County property records. Deed transfers, tax assessments, and mortgage filings are recorded by 58 county assessors and recorders. They publish online, and the brokers scrape them. Buying or selling a home in California puts your address into the broker pipeline within weeks. There is no statewide officer-property-records redaction, and individual counties handle it differently.
2. Voter registration. California voter rolls are not sold to the general public, but candidates, parties, and certain researchers can obtain them, and the data leaks downstream into commercial broker feeds. You can make your registration confidential, but it takes more than a form. Under Elections Code §2166, you need a superior court order showing a life-threatening circumstance to you or someone in your household. Safe at Home participants get confidential voter status automatically.
3. Out-of-state and commercial brokers. The state's agency-side shield does not reach commercial people-search sites like Spokeo, Whitepages, and BeenVerified. They pull from public-record aggregators outside California and from commercial data they buy. The Delete Act reaches the registered ones.

The 2026 LAPD records leak

In April 2026, news outlets reported a breach of a system used by the Los Angeles city attorney's office. It exposed hundreds of thousands of files, including LAPD personnel records and internal affairs investigations, per Fox 11 Los Angeles and TechCrunch. A ransomware group called WorldLeaks claimed responsibility.

The state shield did not stop it. Officers who had filed §7923.601 designations had their lawful agency-disclosure paths closed, but the breach took the data directly. Statutory exemptions protect against lawful disclosure. They do not protect against a breach. Once breached data is dumped online, it flows into the same broker layer the agency shield never reached.

The Hennepin County 2020 first-responder leak and the Anchorage PD traffic-reports exposure followed the same pattern. Agency-side protections did not help, because the data was taken, not requested. Broker scrubbing sits on top of the statutory designations, not instead of them.

Laws that work for you here

• Government Code §7928.300 (formerly §6254.21): file a written request with each agency that holds your address. Once it is on file, the agency cannot release your home address or phone under a Public Records Act request.
• Vehicle Code §1808.4: ask the DMV, through your employing agency, to withhold your home address. Covers active and retired peace officers, judges, prosecutors, and others named in the statute. Retired peace officers can make it permanent.
• Safe at Home (Government Code §§6205-6211): a substitute-address program run by the Secretary of State. Open to victims of domestic violence, stalking, sexual assault, human trafficking, or elder abuse, reproductive-health workers, and, since 2024, public-entity employees who face threats because of their work.
• Delete Act (Civil Code §1798.99.80 et seq.): any California resident can require registered data brokers to delete their personal information through the state's DROP portal. Not first-responder-specific, but it reaches most major people-search sites.
• Elections Code §2166: confidential voter registration, granted by a superior court on a showing of a life-threatening circumstance. Safe at Home participants get it automatically.

Retirees, families, and non-police first responders

Retired peace officers. §1808.4 is permanent on request, and §7923.601 covers retirees the same as active personnel. Separation is the cleanest time to file both.

Families. §1808.4 covers spouses and minor children during the officer's coverage window. The Public Records Act exemption covers a spouse at the same address on request. Surviving spouses of peace officers killed on the job get permanent §1808.4 protection.

Firefighters and EMS. Firefighters are public agency employees, so their home address and phone are already not public records under §7928.300. EMS personnel are not automatically covered under §1808.4 but can request DMV confidentiality through the standard process.

Federal officers. Federal prosecutors, federal criminal investigators, and National Park Service rangers are named in §1808.4. Federal judges sitting in California rely mainly on the federal Lieu Act; state judges are covered by California's public-records exemption.

What we handle that the state doesn't

California's laws shield agencies. They do not touch the data brokers. We handle the broker side.

We file deletion and opt-out requests under California law with the registered brokers that must comply, and standard opt-outs with the many other people-search sites that publish your address regardless of state. We keep re-checking, because listings come back, and breach-driven re-listings can come back fast. The Safe at Home and Public Records Act designations stop the agency from handing out your address. We work the path that runs around them: the sites that publish where you and your family live.

See what a data broker shows about you. Run a free scan.