Codify — Article

California bill creates voluntary 'Do Not Sell' list to block lawful firearm purchases

SB 320 would require DOJ to build a statewide system letting Californians opt in to block lawful firearm purchases while protecting registrant confidentiality.

The Brief

SB 320 directs the California Department of Justice to create a statewide, voluntary “Do Not Sell List” that lets residents add and later remove their own names to stop a lawful purchase or private-party transfer of a firearm while they are on the list. The statute makes registration contingent on identity verification, requires law-enforcement intake and transmission to DOJ, and limits downstream uses of the data.

This bill matters because it converts a personal safety tool — voluntarily self-disqualification from buying a firearm — into an operational state system tied into existing eligibility checks, with confidentiality protections and criminal and civil penalties for misuse. Compliance officers, county law enforcement, and vendors who run eligibility checks would face new operational and technical obligations if the system goes live.

At a Glance

What It Does

Requires the Department of Justice to develop and operate a process that lets California residents voluntarily add and later remove their names from a Do Not Sell List; once on the list, a registrant cannot pass a firearms eligibility check for dealer or private-party purchases. The process must verify identity, protect confidentiality, and use existing state and local resources where feasible.

Who It Affects

County sheriffs and municipal police departments (they accept and verify intake), the Department of Justice (builds, hosts, and updates the list), firearms dealers and private-party sellers who rely on eligibility checks, and Californians seeking to self-restrict their ability to lawfully purchase firearms.

Why It Matters

The bill operationalizes voluntary self-disqualification at scale by tying opt-ins to the state’s purchaser-eligibility systems; that changes how background-check infrastructure, data-handling, and law-enforcement workflows handle temporary self-imposed prohibitions and confidentiality obligations.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

SB 320 sets up a state-managed, voluntary registry that a California resident can use to block themselves from legally buying or acquiring a firearm. A person must submit a completed request form plus bona fide evidence of identity to a county sheriff or municipal police department, which verifies identity, ensures the form is complete, and transmits the record to the Department of Justice.

DOJ is required to host the list so that when a registrant is entered the person will not clear a firearms eligibility check used by dealers or by private-party transfer processes.

The bill prescribes specific features for the registration process: identity verification, notice to the registrant about legal effects, and protections against unauthorized disclosure. It also mandates forms that capture full legal names and aliases, residential address, date of birth, contact info, California ID number, and the registrant’s signature; the intake agency must only accept a form from the person named on it.

DOJ must import completed submissions into the state systems that firearms dealers and background-check queries use, and the change in status is intended to be reflected immediately across those computer-based systems.Removal is also proceduralized: a registrant may seek removal after a short statutory waiting period, and DOJ must remove the person from state computer systems within a specified window unless another law independently bars the person from possession. The bill treats the list as confidential for most purposes, carves out law-enforcement access for official duties, prohibits use of the list as a condition of employment or benefits, requires destruction of retained registration data after removal, and creates criminal and civil penalties for improper use or disclosure.

The Five Things You Need to Know

1

The Department of Justice must develop and launch the Do Not Sell process by November 1, 2027.

2

Intake is handled at county sheriff’s offices or municipal police departments; those agencies must verify identity and transmit completed forms to DOJ no later than three business days after receipt.

3

A registrant may request removal no sooner than 14 days after filing the initial request; DOJ must remove the person from state systems no earlier than 21 days and no later than 30 days after receiving the removal request, unless other law prohibits possession.

4

Records for registrants are to be kept separate from other DOJ records, are exempt from disclosure under the California Public Records Act, and must be destroyed by the holder within 30 days after DOJ removes the person from the list.

5

The bill creates confidentiality protections and a private right of action with potential attorney’s fees for individuals whose status on the list is improperly disclosed or used; knowingly furnishing the data for unauthorized purposes is a misdemeanor.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 30180(a)

DOJ duty to create the Do Not Sell process and stated purpose

This provision directs the Department of Justice to design and launch the Do Not Sell List process by the date in the statute and states the list’s purpose: to prevent a person who voluntarily registers from passing a lawful eligibility check to acquire a firearm. Practically, this makes DOJ responsible for defining how entries will be reflected in the existing automated eligibility-check systems used by dealers and private-party transfers.

Section 30180(c)

Required fields and downloadable forms

SB 320 requires DOJ to create standardized intake and removal forms and publish them online. The statute specifies minimum data elements—full legal names and aliases, residential address, DOB, contact info, California ID number, and signature—and an acknowledgment on the request form describing the legal consequences of registration and the minimum waiting period before removal can be requested. That level of required identity data is intended to limit fraud and ensure accurate matching against eligibility systems.

Section 30180(d)

Local intake, verification, and transmission to DOJ

Intake is performed at local law-enforcement agencies: sheriffs or municipal police. Those agencies must verify identity, refuse forms presented by anyone other than the named person, and transmit identifying information to DOJ in a department-prescribed format and within three business days. This places operational work on local agencies and creates a defined handoff to DOJ for centralization.

3 more sections
Section 30180(e)

Removal request window and DOJ removal timeline

The statute sets a minimum 14-day delay after filing before a registrant may seek removal. Once a local agency forwards a removal request, DOJ has a 21-to-30-day window to remove the person from state computer-based eligibility systems, unless another law otherwise disqualifies the person. Those staged delays affect how quickly an individual regains the ability to pass a firearm eligibility check.

Section 30180(f) and (f)(1)-(3)

Confidentiality, prohibited uses, and civil remedies

SB 320 treats the fact of registration and related records as confidential and not subject to the California Public Records Act, while permitting law-enforcement disclosure for official duties. The bill makes improper inquiries or adverse actions based on a person’s list status actionable, creates a private right of action (including attorney’s fees), and criminalizes knowingly furnishing the information for unauthorized purposes. Those provisions attempt to protect registrants from employment or service discrimination and create enforcement levers for violations.

Section 30180(f) (record retention) and (g)

Record separation, destruction, and prohibition on conditioning benefits

The bill requires that information collected under the section be kept separate from other DOJ records and destroyed by the holder within 30 days after the person is removed from the list. It also prohibits requiring someone to place themselves on the list as a condition of employment or receipt of benefits and services. These rules are designed to limit persistent records and reduce coercive use of the registry by third parties.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Justice across all five countries.

Explore Justice in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Individuals seeking voluntary self-exclusion: people worried about impulsive access to firearms (including those concerned about suicide risk) gain a clear, state-backed mechanism to block lawful purchases without court action.
  • Families and household members: close contacts who want an extra, formal barrier against a person’s legal purchase gain a documented route to support a voluntary opt-in (while the law requires personal submission by the registrant).
  • Public-health and policy researchers (indirectly): DOJ may share aggregate counts, enabling population-level analysis of utilization without exposing individual identities.

Who Bears the Cost

  • Department of Justice: tasked with designing, hosting, and integrating the registry into existing eligibility-check systems, maintaining secure data segregation, and executing timely removals—work that requires funding, IT resources, and ongoing operations.
  • County sheriffs and municipal police departments: local agencies must perform identity verification, intake, and timely transmission to DOJ, adding workload and potential training and recordkeeping obligations.
  • Firearms dealers and private-party sellers: they must rely on updated state systems that will reflect temporary, voluntary prohibitions and bear the operational burden of declined transactions and the need for accurate, timely checks.
  • Registrants themselves: while seeking protection, registrants assume privacy risk if a breach or unauthorized disclosure occurs, and they face short statutory waiting windows before removal that could complicate urgent needs.

Key Issues

The Core Tension

The central dilemma is this: the bill must make self-imposed exclusion reliable and immediate enough to block a purchase while simultaneously keeping registrant data tightly controlled and ephemeral; building systems that both enforce a real-time disqualification and then erase the traces of that enforcement creates conflicting technical, legal, and oversight demands with no easy resolution.

SB 320 attempts to thread two difficult policy needles at once: it wants an effective, reliable block on lawful purchases while minimizing permanent government records and protecting registrants’ privacy. Achieving both goals raises implementation headaches.

The statute demands immediate reflection of list status in the state’s computer-based eligibility systems when someone is added, but it also requires separation and post-removal destruction of records—operationally, those two requirements push DOJ to create transient operational records plus persistent transactional markers in background-check infrastructure. Designing that dual architecture without introducing reconciliation errors or auditability gaps will be technically and legally sensitive.

The confidentiality regime narrows downstream uses and creates a private right of action for violations, but it also permits law-enforcement access and exempts the data from the Public Records Act. That combination leaves open practical questions: what legal process would authorize disclosure to prosecutors or courts; how will subpoenas or criminal investigations interact with the destruction mandate; and how will DOJ demonstrate compliance with destruction and segregation obligations without retaining secondary records for audit?

Finally, the bill’s protections against coercive conditioning are direct, but enforcement depends on proving an adverse action tied to list status—often a difficult evidentiary task—and local agencies may still face pressure to perform intake in contexts that feel coercive even if technically voluntary.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.