In a letter to California state assembly member Marc Levine, Consumer Federation of America and other groups supported his efforts to protect the privacy of personal information that is processed for purposes of containing the COVID-19 pandemic but suggested that the bill should be broader to incorporate the important principles of data minimization, affirmative consent, limits on data retention, and data access, correction and deletion. The groups also pointed to the need for a private right of action to enable individuals to enforce their rights and a prohibition against sharing the data with law enforcement agencies.