"PII is not "protected" when it becomes an element of an interaction with Police or certain public services, it becomes public information (except certain witness/victim identifiers (which actually have laws, federal and state, protecting them). There is no "right" or assumption of privacy when in public. When an interaction between a citizen and a public service occurs that information is now in the public realm, with any protected health information redacted.
...as stated, and affirmed by the SCOTUS. Hence the MOU from the DOJ and not a "law" from the legislature(s).
"On October 12, 2020, the California Department of Justice (DOJ) issued Information Bulletin #20-09-CJIS, which set forth legal mandates and guidelines regarding the “Confidentiality of Information from the California Law Enforcement Telecommunications System (CLETS).” The guidelines require law enforcement agencies to protect Personally Identifiable Information (PII) and Criminal Justice Information (CJI). PII is information such as an individual’s first and last name in combination with more specific data such as a driver license number or date of birth. CJI is information such as wants/warrants, restraining orders, and/or details related to an individual’s probation or parole status."