I suggest reaching out to orgs that do policy work such as Oakland Privacy and Santa Clara Citizens Privacy Coalition.

On data locality, the law can require data transferred out of state to be subject to equivalent level of protection as the CCPA. Such contractual framework makes compliance easier for smaller businesses without a global presence, and helps extend privacy protection to smaller jurisdiction with out as mucj leverage. (However this does not protect the data from being accessed by a foreign government)

Mar 25, 2026, 15:42 by sudo-discuss@sudoroom.org:
Hello SudoRoom!

I used to be a member when I lived in Oakland, but I ended up moving out to the Sacramento area many years ago.

I have a discussion idea that I wanted to run by you fine folks...

We (as Californians) currently have the California Consumer Privacy Act in place, which definitely helps support some consumer protections, but I don't think it requires data to be stored and processed locally within the state.

Do you think Californians would benefit from additional data-locality requirements?
If so, do you think it would be worth attempting to push for GDPR style protections or a similar objective as a CA ballot initiative?

My thoughts were that such an initiative could potentially add protections for consumers while encouraging certain categories of tech work to be conducted locally within the state.

Now, I'm not sure if I actually have the time or energy to follow up on this idea, but I thought this group might be able to help me figure out if it was worth pursuing.

I miss seeing you folks very much, and I hope you're doing well out there!
<3
RyanJ