Is Your Concealed Carry Permit Putting Your Private Information at Risk?

• Posted by:
• mapcadmin
• 12 Nov
• No Comments

What California CCW Holders Need to Know About Public Records Requests, Privacy, and the Disclosure of Personal Information

By Matthew D. Cubeiro
Partner, Michel & Associates, P.C.
November 2026

Imagine discovering that your local police department has posted your concealed carry weapon (CCW) application on a publicly accessible website. Anyone with an internet connection can potentially learn your home address, date of birth, employer, family information, and the makes, models, and serial numbers of firearms you own.

For many Californians, that possibility may come as a surprise. Yet California law treats CCW applications and licenses as public records, and government agencies regularly receive requests for their disclosure.

In one recent matter reviewed by Michel & Associates, a California city released approximately 900 pages of completed CCW applications covering roughly 57 licensees through its public records portal. Although the city redacted some information, the released documents included names, birth information, current and prior home addresses, family and employment details, and information identifying individual firearms. Redactions were inconsistent.

The incident illustrates an important problem: Obtaining a license to exercise the right to carry a firearm may expose sensitive personal information to public disclosure, even when the licensee has done nothing wrong.

What information must California agencies release? What can they withhold? And what remedies are available when a licensing agency discloses information that puts a gun owner or family at risk?

The answers are more complicated—and potentially more troubling—than most licensees realize.

The Law Starts With a Presumption of Disclosure

California’s Public Records Act (CPRA) generally requires government agencies to provide access to records concerning the public’s business. That includes records maintained by police departments and sheriffs responsible for issuing CCW licenses.

In CBS, Inc. v. Block (1986) 42 Cal.3d 646, the California Supreme Court held that CCW applications and licenses were subject to public disclosure, with allowances for removing certain sensitive information.

The case arose when a television station sought records to investigate whether the Los Angeles County Sheriff was improperly exercising his discretion in issuing concealed-carry licenses. At the time, only 35 licenses had been issued in a county with approximately seven million residents.

The Court reasoned that public access to licensee identities and the reasons licenses were issued was necessary to evaluate whether the sheriff was exercising his considerable discretion fairly.

That decision remains binding law.

But California’s licensing system has changed dramatically since 1986.

Following the United States Supreme Court’s decision in New York State Rifle & Pistol Association v. Bruen (2022) 597 U.S. 1, California could no longer condition the right to public carry on an applicant demonstrating a special need beyond that of ordinary law-abiding citizens. California subsequently revised its licensing process through Senate Bill 2.

The public’s interest in government accountability remains important. But the rationale for disclosing detailed personal information about licensees is different when the government administers a system based on eligibility criteria rather than broadly discretionary determinations about who deserves the privilege of carrying a firearm.

The distinction raises an increasingly important question: Does public oversight of CCW licensing really require disclosure of a licensee’s home address, family information, and inventory of personally owned firearms?

We believe the answer should be no.

California Law Already Recognizes Important Privacy Protections

Although CBS v. Block remains controlling, California law contains several provisions allowing agencies to protect sensitive CCW information.

Government Code section 7923.800 provides that the CPRA does not require disclosure of information in a CCW application identifying when or where an applicant is vulnerable to attack. It likewise permits withholding information concerning the medical or psychological history of the applicant or family members.

These protections are particularly important because CCW applications may contain highly personal information, including descriptions of threats, stalking, domestic violence, travel patterns, and other circumstances that could expose applicants to danger.

Consider a license application identifying both a person’s residential address and the firearms that person owns.

The same record could reveal where the applicant lives, what firearms may be associated with that address, and details useful to someone contemplating a theft or other criminal act.

In our view, that combination presents a substantial argument for withholding information under the statutory protection for circumstances identifying where an applicant is vulnerable to attack.

The precise application of that provision to an ordinary licensee’s home address remains unsettled, however. Some California appellate opinions have described CBS broadly as requiring disclosure of licensee addresses.

There is also a separate statutory exemption under Government Code section 7923.805 addressing home addresses and telephone numbers appearing in CCW applications or licenses for specified officials, including prosecutors, public defenders, peace officers, judges, court commissioners, and magistrates.

These protections matter. But they have a limitation that CCW holders should understand.

Most CPRA exemptions permit an agency to withhold information; they do not automatically prohibit the agency from releasing it.

That distinction can determine whether an individual has a legal basis to prevent disclosure through a court proceeding.

Not All Information in a CCW File Deserves the Same Treatment

An application is not simply a person’s name and licensing status.

California’s licensing process requires applicants to disclose extensive identifying information. Applications also identify firearms proposed for inclusion on the license, including make, model, caliber, and serial number.

Following SB 2, licensing agencies may compile additional investigative material, including character-reference interviews, reviews of publicly available statements, background-check results, and psychological assessments where required.

Different categories of information receive different legal protections.

Names and licensing status. Under existing precedent, these are among the most difficult records to withhold. Applicants should generally assume that their names and the fact that they hold a CCW license may become public.

Home addresses and family information. There are substantial arguments for withholding this information under Government Code sections 7923.800 and 7922.000 and California’s constitutional privacy protections. The extent of those protections remains contested, especially for ordinary licensees.

Firearm serial numbers. Serial numbers provide little apparent assistance in assessing whether a government agency fairly administers CCW licensing. Their disclosure, particularly when combined with residential addresses and firearm descriptions, raises serious privacy and security concerns. Whether particular serial-number information must be withheld remains an unresolved legal question.

Medical and psychological information. California law expressly recognizes protections for this sensitive information. Other privacy provisions may also apply.

Criminal history and background investigations. Criminal history records are subject to separate confidentiality laws. Investigative files compiled for licensing purposes may also qualify for protection under Government Code section 7923.600.

The distinction is essential: a legal requirement to disclose some portion of a CCW record does not necessarily justify releasing every other detail contained in that record.

Agencies should review records carefully and redact appropriately protected information rather than treating entire applications as uniformly disclosable.

Why the Agency Holding Your Records Matters

There is another distinction that most CCW holders probably do not know.

Records maintained by a city police department or county sheriff are not necessarily subject to the same statutory protections and remedies as information maintained by the California Department of Justice.

California’s Information Practices Act generally governs state agencies, including DOJ. It imposes requirements concerning the handling and disclosure of personal information and provides potential remedies for qualifying violations.

But the Act expressly excludes local agencies from its general definition of covered agencies.

Consequently, a city or county that improperly releases personal information generally cannot be sued under the Information Practices Act’s ordinary civil-remedy provisions.

Other legal protections may apply, including California’s constitutional right of privacy and statutes governing particular types of confidential records. The availability of any remedy depends on the information released and the circumstances.

DOJ-held records present additional considerations because the Information Practices Act and Penal Code section 11106 regulate particular state-maintained firearm and license information.

The distinction gained considerable attention after DOJ’s June 2022 Firearms Dashboard incident, which exposed personal information concerning approximately 192,000 CCW applicants.

The incident demonstrated the consequences of placing sensitive firearm-related information into publicly accessible systems.

In Doe v. Bonta (9th Cir. 2024) 101 F.4th 633, the Ninth Circuit rejected federal informational-privacy and Second Amendment challenges to California’s disclosure of certain firearm-owner information to qualified researchers.

But that decision involved controlled research disclosures subject to confidentiality and data-security protections—not unrestricted publication of individual records on a public website.

That distinction does not guarantee a successful legal challenge to public disclosure. It does, however, identify an important issue that deserves closer judicial scrutiny.

The Internet Has Fundamentally Changed the Privacy Equation

When CBS v. Block was decided in 1986, obtaining government records typically involved requesting and physically reviewing records held by a public agency.

Today, an agency can upload thousands of pages to a searchable public portal, where documents may be downloaded, copied, redistributed, and preserved indefinitely.

The difference is enormous.

A person’s address, employer, family information, and firearm inventory can potentially be accessed by people anywhere in the world without the applicant ever knowing that the information has been released.

The California Supreme Court’s original concern—permitting the public to monitor whether a sheriff fairly exercised licensing discretion—does not necessarily require this degree of personal exposure.

Government accountability could be served through information about license issuance, denial rates, processing times, and other measures of agency performance, while withholding information that creates unnecessary risks for individual licensees.

That is the balance California’s public records laws should strive to achieve.

Can a CCW Holder Stop a Public Records Release?

Potentially, but the available remedies are narrower than many people might expect.

An individual who learns that a licensing agency intends to disclose sensitive information should act promptly.

The first step is to contact the agency in writing, identify the information at issue, and explain why specific statutory or constitutional protections apply.

Where the applicant has documented threats, stalking concerns, protective orders, or other particularized safety risks, those facts may strengthen the case for withholding sensitive information.

In appropriate circumstances, an affected person may seek judicial relief through what is commonly described as a reverse-Public Records Act action, potentially requesting an injunction or writ of mandate to prevent unlawful disclosure.

But merely establishing that an agency could withhold information under a discretionary CPRA exemption may not be sufficient.

A person seeking to stop disclosure generally must establish that release is otherwise prohibited by law, such as through an applicable confidentiality statute or constitutional protection.

The California decisions in Marken v. Santa Monica-Malibu Unified School District (2012) 202 Cal.App.4th 1250 and Iloh v. Regents of the University of California (2023) 87 Cal.App.5th 513 illustrate this distinction.

Because disclosure may be impossible to undo once records are downloaded or distributed, obtaining timely legal advice can be critical.

What Should CCW Holders Do Now?

CCW applicants and licensees can take practical steps to reduce unnecessary exposure.

When applying or renewing:

• Provide accurate and complete information required by law, but avoid volunteering unnecessary details about travel patterns, daily routines, or other sensitive circumstances.
• If eligible for California’s Safe at Home address confidentiality program, determine whether its substitute-address protections apply to the application.
• Document specific threats or safety concerns and request appropriate confidentiality protections from the licensing agency.
• Ask the agency whether it has a procedure for notifying licensees before responding to public records requests involving their personal information.

If an agency receives a request for your records:

• Object promptly, in writing, to disclosure of sensitive information.
• Identify the particular information that should be withheld and the reasons supporting confidentiality.
• Provide supporting documentation where appropriate.
• Seek legal advice immediately if the agency intends to release information whose disclosure may violate applicable law.

If your information has already been released:

• Preserve evidence showing what was disclosed, where it appeared, and when it became available.
• Request prompt removal from public portals and preservation of relevant access and download logs.
• Determine whether the agency has additional legal obligations arising from the disclosure.
• Consult counsel promptly about potential remedies and applicable deadlines.

These measures cannot guarantee confidentiality. They can, however, help establish a record and preserve potential options.

California Should Reconsider Its Approach

Other states have adopted stronger confidentiality protections for concealed-carry records.

Florida, Texas, and Nevada have statutes protecting specified CCW application or license information from public disclosure. New York provides a process through which qualifying permit holders can seek protection of identifying information.

California has chosen a different approach, permitting broader public access subject to statutory exceptions.

In our view, that approach deserves reconsideration.

The government has a legitimate interest in allowing the public to evaluate the fair administration of licensing laws. But a person’s exercise of the constitutional right to carry a firearm should not unnecessarily expose home addresses, family information, and firearm inventories to public dissemination.

The rationale for disclosure articulated in CBS v. Block arose from a materially different licensing system. The subsequent recognition of the constitutional right to public carry, changes in California law, and widespread internet distribution of public records justify a fresh examination of the balance between transparency and personal security.

California could address much of this problem legislatively by protecting identifying information while preserving access to meaningful government oversight data.

Until then, licensing agencies should use the existing exemptions and confidentiality protections carefully rather than assume that every item appearing in a CCW application belongs in the public domain.

The Bottom Line

California CCW holders should understand that their applications and licenses are generally public records. Under existing precedent, their names and licensing status may be disclosed.

But the fact that a record is public does not mean every piece of personal information within it must be released.

Home addresses, family information, firearm serial numbers, medical records, and investigative materials present distinct legal and privacy concerns. Some information can be withheld under express CPRA exemptions, and certain records are protected by separate confidentiality laws.

For CCW holders, the most important step is to understand these distinctions before a disclosure occurs.

For California licensing agencies, the responsibility is to comply with public records law without needlessly exposing sensitive personal information or disregarding legally protected confidentiality interests.

The right to governmental transparency and the right to personal security should not be treated as mutually exclusive.

Selected Legal Authorities

• CBS, Inc. v. Block (1986) 42 Cal.3d 646.
• New York State Rifle & Pistol Association v. Bruen (2022) 597 U.S. 1.
• Doe v. Bonta (9th Cir. 2024) 101 F.4th 633.
• Marken v. Santa Monica-Malibu Unified School District (2012) 202 Cal.App.4th 1250.
• Iloh v. Regents of the University of California (2023) 87 Cal.App.5th 513.
• Gilbert v. City of San Jose (2003) 114 Cal.App.4th 606.
• California Government Code §§ 7922.000, 7923.600, 7923.800, 7923.805.
• California Civil Code §§ 1798.3, 1798.24, 1798.45.
• California Penal Code §§ 11106, 26175, 26202, 26225.

This article provides general legal information and commentary, not legal advice for any particular situation. Applicable law and individual circumstances may affect whether records must be disclosed and what remedies are available.

About the Author

Matthew D. Cubeiro is a partner at Michel & Associates, P.C., where he practices firearms and constitutional law, including matters affecting California firearm owners and concealed-carry licensees.