AB 935 adds targeted data-collection duties for two state entities: the Department of Education (through the Superintendent) and the Civil Rights Department. The bill requires those agencies to record demographic and complaint-specific fields when they receive discrimination- or civil-rights-related complaints, and to publish deidentified, aggregate summaries on their websites.
The statute also creates a confidentiality regime: information collected under the new provisions is protected from public disclosure under the California Public Records Act except to the same extent the underlying complaint is disclosable, and published reports must omit personally identifying information. For compliance officers, school administrators, and civil-rights practitioners, the law creates new reporting obligations, new datasets for oversight, and practical privacy and implementation trade-offs to manage.
At a Glance
What It Does
The bill requires the Superintendent of Public Instruction to capture specified fields when the State Department of Education receives a Uniform Complaint Procedures (UCP) complaint alleging discrimination, harassment, intimidation, or bullying, and requires the Civil Rights Department to collect demographic details for complaints it receives. Both agencies must produce deidentified summary reports online; the Civil Rights Department must begin annual publication by October 1, 2028 covering the preceding calendar year, with collections for SDE starting July 1, 2026.
Who It Affects
State agencies that receive discrimination- or civil-rights-related complaints (the State Department of Education and the Civil Rights Department) must change intake and recordkeeping practices. School districts and local complaint filers will see new data fields and may be affected indirectly. Researchers, advocacy groups, and policymakers gain a new, deidentified dataset for monitoring disparities.
Why It Matters
The law institutionalizes complaint-level demographic tracking across two major enforcement channels and couples that tracking with strong confidentiality protections. That combination aims to enable trend analysis while attempting to limit reidentification risk — a design that will shape how complaints are handled, how information is stored, and what data can be shared publicly or used for enforcement and policy.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
AB 935 amends the Education and Government Codes to require targeted demographic and complaint-related data collection at two points of intake. For complaints handled under the State Department of Education’s Uniform Complaint Procedures that allege unlawful discrimination, harassment, intimidation, or bullying, the Superintendent must record specific details about the complaint and the complainant when the department receives the submission.
The law places the duty at the state-department intake level rather than rewriting local district procedures, so the Department of Education will need to ensure its intake forms and records capture the required fields for complaints that reach state review.
Separately, the Civil Rights Department must collect demographic information for complaints it receives, including items such as ethnicity, race, and gender of the complainant and certain facts about the allegation. The department must compile those data and publish an annual summary of the prior calendar year’s information on its website; that publication obligation begins after a statutory start date.
The summaries must be presented in an aggregate, deidentified form that prevents the identification of individuals involved in specific complaints.To protect complainants, AB 935 makes information and data acquired under these provisions confidential and shields them from public disclosure under the California Public Records Act, except that disclosure may occur to the same extent as the underlying complaint itself would be disclosable. The bill also requires that any published reports, dashboards, or transmitted datasets not contain personally identifying information and be sufficiently deidentified to prevent reidentification.
Finally, the Legislature included formal findings to satisfy the state-constitutional requirement that any limitation on public access to government writings be justified by demonstrated need.
The Five Things You Need to Know
The Superintendent must begin collecting specified demographic and complaint-description fields for UCP complaints alleging discrimination, harassment, intimidation, or bullying beginning July 1, 2026.
The Civil Rights Department must collect complainant demographic details (including race, ethnicity, and gender) and related complaint facts and publish an aggregate, deidentified annual summary on its website covering the prior calendar year, with the first annual publication required by October 1 following the 2027 collection year.
All information and data acquired under these new provisions are confidential and protected from disclosure under the California Public Records Act, except disclosure is allowed to the same extent as the underlying complaint is disclosable.
Published reports, dashboards, and any transmitted data must omit personally identifying information and be sufficiently deidentified to prevent identification of individuals involved in complaints.
The statute includes legislative findings to satisfy the California constitutional requirement for laws that limit public access to government writings, linking the confidentiality rules to a demonstrated interest in protecting complainant privacy.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
State Department of Education: UCP complaint data collection
This section directs the Superintendent to collect specific information when the Department of Education receives a Uniform Complaint Procedure submission alleging unlawful discrimination, harassment, intimidation, or bullying. Practically, the department must ensure intake workflows capture a complaint description and designated demographic fields for the complainant. The provision centralizes data capture at the state level for complaints that reach the department, which will require form updates, recordkeeping changes, and likely coordination with local educational agencies that funnel complaints upward.
Civil Rights Department: demographic collection and annual reporting
This subsection obligates the Civil Rights Department to collect demographic information — expressly including ethnicity, race, and gender — for complaints it receives, and to compile those data for publication. It sets a reporting cadence: the department must publish an annual summary no later than October 1 reporting on the prior calendar year, with statutory timing for when that obligation begins. The practical effect is to create a recurring, public-facing dataset on complaint demographics while leaving the raw intake records under separate confidentiality rules.
Confidentiality, CPRA exemption, and deidentification requirements
This subsection establishes that information acquired under the new data-collection rules is confidential and protected from disclosure under the California Public Records Act, but permits disclosure to the same degree the underlying complaint is disclosable. It also prohibits published summaries, dashboards, and transmitted data from containing personally identifying information and requires that published outputs be sufficiently deidentified to prevent reidentification. Agencies must interpret and operationalize both the CPRA carve-out and the deidentification standard when designing data releases and internal access controls.
Constitutional findings supporting limited public access
The bill includes findings required by the California Constitution when a statute limits public access to writings of public agencies. Those findings articulate the public interest in protecting complainant privacy and justify the confidentiality regime; they will be the reference point in any legal challenge arguing that the CPRA exemption or limits on disclosure are unsupported.
This bill is one of many.
Codify tracks hundreds of bills on Civil Rights across all five countries.
Explore Civil Rights in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Protected-class individuals who file complaints — the confidentiality rules and deidentification reduce the risk that complainants will have their identities broadly disclosed when agencies share aggregate data.
- Policy analysts, researchers, and civil-rights advocates — the mandated, recurring summaries create a consistent, centralized dataset to detect patterns of discrimination across complaint streams and over time.
- State agencies (SDE and Civil Rights Department) — receiving structured demographic data improves the agencies’ ability to analyze trends, prioritize investigations, and justify resource allocations based on documented disparities.
Who Bears the Cost
- State agencies (Department of Education and Civil Rights Department) — they must implement new intake fields, update IT systems and forms, train staff on data collection and deidentification practices, and sustain annual reporting operations.
- Local education agencies and intake personnel — while the law focuses on state-level collection, districts and local staff who prepare or forward complaints may need to capture additional voluntary demographic details or coordinate with state systems.
- Complainants and advocacy organizations — some complainants may decline to provide demographic information, reducing data completeness; advocacy groups may need to invest in outreach to encourage voluntary self-identification to preserve analytical value.
Key Issues
The Core Tension
The central dilemma is between protecting complainant privacy (and thereby encouraging complaint filing) and producing sufficiently detailed, public-facing data to make patterns of discrimination visible and accountable; stronger privacy protections reduce reidentification risk but can also limit the utility of the datasets for oversight and research.
AB 935 tries to thread a difficult needle: provide useful, complaint-level demographic data for oversight while protecting complainant privacy through confidentiality and deidentification. That balance raises several implementation questions.
First, the statute does not specify exact deidentification standards or statistical thresholds to prevent reidentification; agencies will need to adopt operational criteria (cell-size suppression, noise infusion, or aggregation rules) that lawyers, privacy experts, and researchers may debate. Second, the bill ties CPRA disclosure limits to the disclosure status of the underlying complaint, but it does not fully resolve how to treat complaints that are publicly disclosed in some contexts (for example, matters that become enforcement actions), which could create patchy access and legal uncertainty.
Data quality is a second concern. The bill requires collecting race, ethnicity, and gender but does not define standardized categories or require whether self-identification is mandatory or voluntary; inconsistent collection methods across intake channels will undermine comparability.
Finally, there is a practical trade-off between transparency and completeness: stricter privacy protections and voluntary fields can shrink the analytic usefulness of published summaries, while more granular releases increase reidentification risk. Agencies will have to choose where to position themselves on that spectrum with limited statutory guidance.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.