2195.
(a) The Secretary of State may apply for membership with the Electronic Registration Information Center. If the membership application is approved, the Secretary of State may execute a membership agreement with the Electronic Registration Information Center on behalf of the state.(b) The Secretary of State shall ensure that any confidential information or data provided by another state to the Secretary of State remains confidential while in the Secretary of State’s possession.
(c) Unless otherwise specified in this section, notwithstanding subdivision (c) of Section 7924.000 of the Government Code, paragraph (1) of subdivision (b) of Section 2194, or any other law, the Secretary of
State may provide confidential information or data to persons or organizations pursuant to an agreement entered into under this section.
(d) Notwithstanding subdivision (c), no information or data related to any of the following may be disclosed to any person or organization pursuant to an agreement entered into under this section with the state:
(1) Any driver’s license or identification card issued pursuant to Section 12801.9 of the Vehicle Code.
(2) Citizenship.
(e) The Secretary of State may adopt regulations necessary to implement this section, including, but not limited to, regulations establishing procedures necessary to protect the confidential information identified in subdivision (c). The Secretary of State shall consult with the California
Privacy Protection Agency on the development of any regulations related to the Electronic Registration Information Center.
(f) Before sending any information or data to the Electronic Registration Information Center, the Secretary of State shall receive a certification from the Department of Technology that all proper cybersecurity protections, as determined by the Department of Technology, are in place to allow the Secretary of State to send, and the Electronic Registration Information Center to receive, the data required by the Electronic Registration Information Center. If the Electronic Registration Information Center changes its data requirements, the Secretary of State shall receive a new certification from the Department of Technology certifying that all proper cybersecurity protections, as determined by the Department of Technology, are in place to allow the Secretary of State to send, and the Electronic Registration Information Center
to receive, the data required by the Electronic Registration Information Center.