California’s New Immigration-Services Privacy Law Does Not Take Effect Until 2027. Its Free-Speech Fight Is Already Here.

Assemblyman Carl DeMaio says he is preparing a lawsuit and wants the Trump administration to intervene. The enacted text of AB 2624 is narrower than claims that it broadly bans fraud investigations — but its reach over online images and personal information will invite legal scrutiny.

California Gov. Gavin Newsom signed Assembly Bill 2624 on Aug. 22, creating new privacy protections for people who provide immigration-related services. Republican Assemblymember Carl DeMaio of San Diego now says he is preparing a lawsuit and has asked the Trump administration’s Justice Department to intervene.

But several central claims in the political fight need clarification before the law becomes a campaign-season proxy for California’s wider disputes over immigration, taxpayer oversight and free speech.

The verified bottom line: AB 2624 does not take effect on Oct. 1, 2026, as Fox News reported. The enacted law says its new chapter becomes operative on Oct. 1, 2027, and directs the secretary of state to begin accepting applications that day. Nor does the law, on its face, prohibit journalism or investigations into fraud. It restricts specified online publication of a covered person’s image or personal information only when the speaker has a specific intent to incite imminent violence or make a threat that produces an objectively reasonable fear for personal safety.

What Newsom signed

AB 2624 expands California’s existing Safe at Home address-confidentiality system. The program was originally designed to help domestic-violence survivors keep home addresses out of public records. California has subsequently extended similar protections to other groups, including certain health-care workers and patients.

Under the new law, people associated with designated immigration-support-services facilities may apply for a substitute address. Covered services include legal assistance, advocacy, case management, humanitarian relief, referrals, translation, counseling and health care. Covered facilities can include nonprofits, legal clinics, law offices, federally recognized immigration-service entities and health-care facilities.

Enrollment is not automatic. Applicants must document their connection to a covered facility and submit either a certified statement about recent threats or harassment, a personal certified statement, or a qualifying restraining order. They must also swear that they fear for their safety or their family’s safety. Knowingly false statements can be prosecuted as misdemeanors. The secretary of state may terminate participation if an application contained false information or if the program is used to evade law enforcement or conceal illegal activity.

That last provision matters in assessing the assertion that the statute creates a blanket shield for fraudulent organizations. The law protects qualifying individuals’ identifying information and addresses; it does not declare the organizations immune from audits, subpoenas, criminal investigations, public-records disputes or civil fraud claims.

What the online-publication provisions actually say

The fiercest objection centers on provisions dealing with internet posts. AB 2624 creates potential civil liability when someone knowingly publishes or distributes a covered worker’s personal information or image with the specific intent either to incite another person to cause imminent great bodily harm, where that person is likely to do so, or to threaten the person in a way that creates an objectively reasonable fear for safety.

A successful plaintiff can seek an injunction, attorney fees and damages of at least $4,000, with higher damages possible in some circumstances. A separate provision makes it unlawful to post that information with the specific intent that someone imminently use it to commit a violent crime or threat of violence.

Those intent requirements are material. A reporter publishing an image of a nonprofit office, interviewing an employee on camera, documenting an allegation of misuse of public money or naming an organization is not automatically liable under the statutory language. A plaintiff would need to establish the required intent and, in key provisions, an imminent and likely risk of violence or a threatening effect.

That does not settle every constitutional question. Critics can reasonably argue that the terms “image,” “personal information” and “designated immigration support services provider” are broad enough to chill speakers who fear expensive litigation. Supporters can reasonably answer that the law tracks protections California already provides to other people exposed to targeted harassment, while requiring a demanding intent showing rather than punishing criticism alone. A court, not either side’s press release, would decide whether the final language is overbroad or unconstitutional as applied.

DeMaio’s lawsuit is a plan, not a filed case

DeMaio told Fox News that he has a prospective plaintiff and is preparing briefs. He said he hopes the Justice Department’s Civil Rights Division will intervene. As of Aug. 30, however, those statements describe a proposed legal challenge, not a court ruling or a publicly identified filed lawsuit.

The Fox headline also describes a “whistleblower” asking President Donald Trump for help. The account itself identifies DeMaio as the person requesting Justice Department involvement. He is an elected state assemblymember and a partisan opponent of the law, not an identified whistleblower providing evidence from inside a government program or organization.

DeMaio has called the measure the “Stop Nick Shirley Act,” referring to conservative online personality Nick Shirley, whose videos have alleged fraud involving child-care providers. Newsom’s office says the bill has nothing to do with Shirley and does not stop fraud reporting. The bill text does not name Shirley, child care, ballot collection, political endorsements or any alleged fraud scheme.

Fraud allegations require evidence beyond rhetoric

California has faced real, documented fraud problems across multiple government programs, including pandemic-era unemployment benefits and health-care billing. Those failures warrant aggressive oversight, transparent records and prosecution when evidence supports charges.

But DeMaio’s broader allegation that immigration-support nonprofits are operating as extensions of the Democratic Party, harvesting ballots and receiving public money while providing no services is not established by AB 2624, its legislative findings or the evidence presented in the Fox report. The claim is therefore unsupported on the available record. Individual organizations or contractors may be investigated on evidence specific to them; sweeping accusations about an entire class of providers require more than political inference.

The law’s first real test will come before it is enforced. Watch for a filed complaint identifying the exact provisions challenged, the proposed plaintiff’s intended conduct, and whether federal officials take a formal position. Those documents — rather than the slogan attached to the bill — will show whether this becomes a narrow dispute over anti-doxxing rules or a consequential First Amendment case.