The bill creates the Office of the California Public Records Act Ombudsperson, a Governor‑appointed official with legal experience who will receive and investigate complaints that a state agency improperly denied a CPRA request, issue written determinations, and publish those opinions online. The office must develop submission and review procedures, protect confidential information, and the Governor must provide staff to support the ombudsperson.
If the ombudsperson finds an improper denial, the agency must provide the records unless a statutory exemption applies; the agency can appeal to superior court for de novo review. The statute preserves the public’s right to sue directly without exhausting administrative review and requires yearly reporting to the Legislature, including data on determinations, reimbursements, and a study on expanding review to local agencies.
At a Glance
What It Does
Creates a new administrative reviewer for CPRA denials: the Governor appoints an ombudsperson who accepts review requests, must decide within 30 days (with limited extensions), issues written opinions and posts them online, and can require agencies to release improperly withheld records unless exempted by law.
Who It Affects
Directly affects members of the public who file CPRA requests, state agencies that respond to those requests (and must produce records to the office), the Governor (who appoints and staffs the office), and superior courts that may hear de novo appeals from agencies.
Why It Matters
This adds a standing administrative review layer intended to reduce ad hoc litigation and create a public record of disclosure rulings. It changes how CPRA disputes are resolved in practice by offering a fast administrative determination with a clear path to judicial review and fee shifting if courts affirm the ombudsperson.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill sets up a centralized office whose job is to second‑look at state agency denials under the California Public Records Act. The Governor appoints the ombudsperson, who must be a California‑licensed attorney with at least five years’ practice, and the Governor must provide staff and fill vacancies quickly.
The office creates a public process for filing a request for review and for persons whose information appears in records to intervene to assert privacy or confidentiality claims.
A requester can ask the ombudsperson to review a denial; the office must determine within 30 days whether the records were improperly withheld and notify both parties of its reasons. The statute allows written extensions in “unusual circumstances,” but the ombudsperson must reassess and notify the parties every 30 days if an extension is in place.
Agencies must give the ombudsperson access to the documents and information supporting their denials, but the ombudsperson cannot force disclosure of records that are lawfully exempt.When the office concludes disclosure was required, the state agency generally must provide the records subject to any legal exemptions. The ombudsperson will publish written opinions on a website; opinions are nonbinding and may be treated as persuasive authority by agencies and courts.
The bill preserves the public’s right to file a lawsuit under existing CPRA litigation procedures without first using the ombudsperson process, and it requires the requester to notify the office if they file suit so the ombudsperson will stop its review.The statute creates a straightforward appellate path: a state agency can petition the superior court for de novo review of an adverse determination. If the court affirms the ombudsperson, the requester is entitled to court costs and reasonable attorney’s fees under existing fee‑shifting rules.
The ombudsperson may also produce guidance for agencies and the public, and must deliver an annual report to the Legislature containing activity metrics, reimbursement information, and a mandated assessment by March 1, 2028 on whether to extend review to local agencies.
The Five Things You Need to Know
The Governor appoints the ombudsperson, who must be a California attorney with at least five years’ admission and the Governor must fill vacancies within 30 days.
The ombudsperson must decide a request for review within 30 days of receipt, with written extensions permitted in unusual circumstances and required reassessment every 30 days.
State agencies must provide the ombudsperson access to all records and materials relied on in denying the original CPRA request, subject to existing statutory exemptions.
The ombudsperson must post every written opinion online; opinions are not binding precedent but may be persuasive to agencies and courts.
Agencies can appeal an adverse ombudsperson determination to superior court for de novo review; if the court affirms, the requester is entitled to court costs and reasonable attorney’s fees.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Establishes the Office of the CPRA Ombudsperson
This subsection creates the office in state government and assigns it the core mission: receive, investigate, and issue written determinations about alleged improper denials under the California Public Records Act. Creating a stand‑alone office centralizes oversight and gives requesters a named entity to which to escalate disputes, rather than routing every conflict straight to court.
Appointment, qualifications, and staffing
The Governor appoints the ombudsperson, who must have at least five years’ admission to the California bar. The provision forces a quick replacement cycle—if the office is vacant or the ombudsperson is incapacitated for 30 days, the Governor must appoint a successor within 30 days. The Governor is also required to provide necessary staff, which makes the office operationally dependent on executive resourcing decisions and raises questions about funding and independence in practice.
Review process, timelines, interventions, and confidentiality
This section prescribes the operational mechanics: the ombudsperson must establish a public submission process, permit third‑party intervention for persons whose information appears in reviewed records, and complete determinations within 30 days (with narrowly defined extensions that require notice and ongoing reassessment). Agencies must turn over all documents and information relied on in a denial to the ombudsperson, and the office must follow the same confidentiality rules that bind the agency. The statute also requires the ombudsperson to adopt policies for handling, transferring, and storing records so that sensitive information stays protected during review.
Opinions, publication, and guidance
The ombudsperson must retain copies of written opinions and post them on the office website. Those opinions are explicitly nonbinding; the bill frames them as persuasive resources that agencies and courts may consider. Separately, the office may issue guidance and educational material for both agencies and the public about CPRA compliance—creating a potential source of consistent interpretive guidance short of formal rulemaking.
Interaction with litigation and judicial review
The statute preserves the requester’s right to file a CPRA lawsuit without exhausting the ombudsperson’s process and requires immediate notification to the office if a suit is filed, at which point the ombudsperson halts its review. State agencies, however, may appeal an adverse determination by petitioning the superior court; the court reviews the matter de novo. If the court upholds the ombudsperson’s determination, existing fee‑shifting law entitles the requester to court costs and reasonable attorney’s fees. Individuals whose information appears in disclosed records retain the right to seek declaratory relief or mandamus to prevent improper disclosure.
Reporting, reimbursements, and local‑agency study
The ombudsperson must deliver an annual report to the Legislature by March 31, starting in 2027, covering office activities, counts of requests and determinations, and reimbursements sought and obtained from state agencies for investigation costs. The report must also include, by March 1, 2028, an assessment of whether the same review process should apply to local agencies. The reporting requirement builds accountability and gives the Legislature metrics to evaluate scaling or funding changes.
This bill is one of many.
Codify tracks hundreds of bills on Government across all five countries.
Explore Government in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Members of the public and requesters (including journalists and researchers): they gain a named, administrative path for a quicker, lower‑bar review of denials and access to written determinations and published opinions.
- People whose privacy interests are implicated in records: the statute creates a formal intervention mechanism so third parties can assert confidentiality claims during review, getting an active role instead of reacting only in litigation.
- Legislators and oversight bodies: the required annual reports give lawmakers data on CPRA compliance trends, office activity, and reimbursement outcomes to inform policy changes.
- Requesters’ attorneys and public‑interest law firms: clearer administrative opinions and the prospect of fee shifting if courts affirm the office can strengthen enforcement strategies and reduce the uncertainty of initial litigation.
Who Bears the Cost
- State agencies that respond to CPRA requests: they must provide relevant documents to the ombudsperson, potentially disclose records found improperly withheld, and may face increased operational costs and administrative burdens.
- The State budget/taxpayers: the office requires staffing and operating funds provided by the Governor, and while the ombudsperson may seek reimbursements from agencies, initial and ongoing costs fall on the state budget unless specifically funded elsewhere.
- Agency legal counsel and departments of counsel: agencies will likely expend more attorney time defending denials, preparing materials for review, and litigating de novo appeals in superior court.
- Superior courts and the judicial system: the de novo appeal path may increase caseloads and duplicate work between the administrative office and courts, imposing time and resource costs on the judiciary.
Key Issues
The Core Tension
The central dilemma is whether creating a single administrative reviewer will meaningfully improve access to records and reduce litigation costs, or whether vesting review power in a Governor‑appointed office (with uncertain funding and nonbinding opinions alongside de novo judicial review) will simply add a politically controlled, resource‑intensive layer that duplicates court work and shifts costs without delivering reliable independence or faster outcomes.
The bill creates an administrative pathway intended to reduce CPRA litigation, but several implementation questions remain. The Governor must provide staff, yet the statute does not specify funding levels or whether the office will be independent in budgeting and hiring; that dependency may undercut perceived impartiality.
The appointment process gives the executive branch control over leadership and staffing, creating a structural tension between independence and accountability.
Operationally, the ombudsperson gains access to sensitive records and must develop secure handling procedures, but the statute leaves many confidentiality mechanics to policy rather than statute—raising risk during implementation. Because opinions are nonbinding while courts review agency appeals de novo, parties could face duplicated work and costs: agencies will prepare files for administrative review and later for court, and requesters may still pursue litigation.
Finally, the bill allows the office to seek reimbursements from agencies for investigation costs, but it does not create a clear, predictable funding model; this could either leave the office underfunded or shift costs onto agencies that already have tight budgets, producing perverse incentives to litigate rather than comply.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.