California Doxing Laws | Penal Code 653.2 & AB 1979 Civil Damages

Does California Have Laws Against Doxing?

Yes, California has strict criminal laws and explicit civil remedies that target doxing.

Doxing—the unauthorized publication or distribution of an individual's private identifying information online—is primarily prosecuted as a crime under California Penal Code 653.2 PC (Cyber Harassment).

Furthermore, under Assembly Bill 1979 (the Doxing Victims Recourse Act), California allows victims to sue perpetrators in civil court for substantial monetary damages.

Because online data spreads rapidly and can lead to physical stalking, identity theft, or safety threats, California prosecutors and civil courts aggressively pursue digital harassment offenses.

Quick Reference Summary: California Doxing Laws At a Glance

Feature	Criminal Prosecution (PC 653.2)	Civil Lawsuits (AB 1979)
Legal Classification	Misdemeanor	Civil Tort / Lawsuit
Maximum Penalties	Up to 1 year in county jail and/or $1,000 fine	Statutory damages from $1,500 to $30,000
Core Elements Required	Electronic device use, lack of consent, intent to cause fear/incite harassment	Knowing the publication of private data causes substantial distress or safety risks
Additional Remedies	Criminal protective orders, stay-away mandates	Court injunctions, punitive damages, and attorneys' fees
Anonymity Protections	Mandated victim privacy protections in filings	Allows victims to sue using pseudonyms (e.g., "Jane Doe")

Criminal Doxing: Penal Code 653.2 PC

Under Penal Code 653.2 PC, it is a misdemeanor to use an electronic communication device to distribute a person's identifying information (such as home addresses, phone numbers, email accounts, or GPS locations) without consent.

What Prosecutors Must Prove for a Conviction

To prove a defendant guilty of criminal doxing, the prosecution must demonstrate all the following elements beyond a reasonable doubt:

Digital Distribution: The defendant used an electronic device or platform to share private identifying data.
Absence of Consent: The data was shared entirely without the victim's permission.
Intent to Cause Fear or Harassment: The defendant intentionally aimed to make the victim or their family reasonably fearful for their safety or sought to provoke others to harass, threaten, or engage in unwanted physical contact with the victim.
Likelihood of Harm: The distributed data was reasonably likely to imminently incite third-party harassment or injury.

Civil Doxing: AB 1979 (Doxing Victims Recourse Act)

The Doxing Victims Recourse Act (AB 1979) establishes a strong civil remedy for victims. It allows individuals targeted by doxing campaigns to file private lawsuits directly against the perpetrator.

Damages and Relief Available to Plaintiffs:

Statutory Financial Recovery: Courts can award statutory damages ranging between $1,500 and $30,000, even if the victim cannot prove an exact dollar amount of economic loss.
Economic & Emotional Distress Damages: Compensation for lost wages, security system installations, moving expenses, or severe emotional trauma.
Court Injunctions: Immediate, legally binding orders forcing the defendant to permanently delete the leaked information and cease all online tracking.
Legal Fees: The court may order the losing defendant to pay the victim's complete attorney fees and litigation costs.

Real-World Example of Doxing

Example: During a heated online argument, someone discovers a critic's personal cell phone number, workplace address, and home location. They post this information publicly with the caption, "This person is destroying our community. Here is where they work and live. Make their life a nightmare."

Since this information was shared electronically without permission, aiming to encourage third-party harassment and foster reasonable fear in the victim, the poster could be sentenced to up to one year in county jail under PC 653.2 and may also face a significant civil lawsuit for financial compensation under AB 1979.

Penalties for Doxing in California

California punishes doxing using a two-pronged legal approach.

Perpetrators can face misdemeanor prosecution in criminal court under Penal Code 653.2 PC as well as substantial civil liability and lawsuits under the Doxing Victims Recourse Act (AB 1979 / Civil Code 1708.89).

Criminal Court Penalties (PC 653.2)

If state prosecutors convict you of criminal doxing or cyber harassment, it is considered a misdemeanor with the following statutory penalties.

County Jail: Up to one (1) year in a California county jail.
Criminal Fines: A maximum fine of up to $1,000 per offense (plus court-ordered penalty assessments).
Summary Probation: A term of court-supervised probation (typically 1 to 3 years), which usually requires complying with protective orders and performing community service.
Criminal Protective Orders: A court order that mandates the defendant to avoid and stop all electronic or physical contact with the victim and their family.

Civil Court Penalties and Restitution (AB 1979)

Under the Doxing Victims Recourse Act, individuals who have been doxed can sue the responsible party directly in civil court. A civil judgment may result in substantial financial penalties, including:

Statutory Damages: A mandatory financial assessment ranging from $1,500 to $30,000, even if the victim cannot prove exact out-of-pocket financial losses.
Economic & Non-economic Damages: Full reimbursement covers physical harm, property damage, emotional distress, moving expenses, or security system installations caused by the leak.
Punitive Damages: Additional monetary fines imposed by the court to explicitly punish malicious or intentional digital misconduct.
Attorney's Fees and Court Costs: The court can order the defendant to pay 100% of the victim's legal representation fees and litigation expenses.
Equitable Injunctions: Restraining orders require the immediate removal of leaked data from all platforms, with heavy fines or jail for contempt if ignored.

Collateral and Long-Term Consequences

Professional License Suspension: A background check that indicates digital harassment may trigger automatic investigations by California licensing authorities, potentially jeopardizing careers in law, medicine, education, or real estate.
Immigration Sanctions: For non-citizens, doxing that escalates to stalking or domestic violence may be regarded as a crime involving moral turpitude, which could result in visa revocation or deportation.
Permanent Digital Footprint: Unlike physical offenses, a public conviction for online harassment creates a searchable record that often results in immediate disqualification in corporate job screenings.

Common Legal Defenses to Doxing Allegations

A skilled defense lawyer can counter doxing accusations through various expert digital tactics.

Lack of Specific Malicious Intent: The information may have been shared for a legitimate purpose, out of a misunderstanding, or without any intent to trigger fear or third-party harassment.
Public Domain / Public Records: If the information distributed was already readily accessible through lawful public real estate records, voter registries, or corporate filings, the claim of a malicious privacy breach is weakened.
Mistaken Identity or Spoofing: Online accounts can be hacked, devices can be shared, and IP addresses can be spoofed. The defense can challenge the prosecution's ability to definitively link the keyboard to the defendant.
First Amendment Protections: If the shared communication constitutes a protected political opinion, consumer review, or a matter of public discourse rather than an actionable "true threat" or incitement, it is protected by free speech.

Related California Laws

Doxing behaviors often coincide with or lead to charges under related California laws.

Penal Code 646.9 PC (Cyberstalking): Repeatedly harassing or following someone electronically while communicating a credible threat that induces fear.
Penal Code 422 PC (Criminal Threats): Issuing a threat of death or great bodily injury that causes an individual sustained, objective fear.
Penal Code 530.5 PC (Identity Theft): Unlawfully obtaining and misusing someone else's personal identifying information for a fraudulent or unlawful purpose.
Penal Code 502 PC (Computer Crimes): Hacking into, accessing, or extracting data from a computer system, profile, or network without authorization to obtain the doxed material.
Penal Code 653m PC (Annoying Communications): Making continuous, obscene, or harassing electronic contacts to intentionally torment a target.

Frequently Asked Questions (FAQs)

Is doxing a felony or a misdemeanor in California?

Criminal doxing under Penal Code 653.2 PC is charged as a misdemeanor, punishable by up to 1 year in county jail.

However, if the doxing involves stolen financial profiles, hacking, or explicit death threats, prosecutors can file separate felony charges, such as Identity Theft (PC 530.5) or Criminal Threats (PC 422), in addition.

Can I be arrested if the information I posted was already public online?

Potentially yes. Even if an address or phone number is uncovered through deep online searches, California law focuses on your intent. Sharing that data with the express intent to invite an online mob to harass or threaten the target makes the act illegal under PC 653.2.

What is the difference between doxing and cyberstalking?

Doxing (PC 653.2) typically involves a single or limited broadcast of private data intended to incite others (third parties) to harass the victim. Cyberstalking (PC 646.9) requires a continuous, repeated pattern of direct harassment by the defendant, combined with a direct, credible threat.

How can a victim hide their identity during a doxing lawsuit?

Under AB 1979, the court allows victims of doxing to file their lawsuits under pseudonyms (such as "Jane Doe") to prevent further secondary doxing or retaliatory harassment during litigation.

Can a non-citizen face deportation for a doxing conviction?

Yes. If the criminal harassment or doxing involves tracking an intimate partner (in a domestic violence context) or includes serious threats of physical violence, it can be classified as a crime involving moral turpitude, triggering severe federal immigration consequences.

Speak with a California Criminal Defense Attorney

If you are facing a doxing investigation, a restraining order, or a civil lawsuit under AB 1979, early legal intervention is critical. Digital investigations involve complex data trails, forensics, and nuanced constitutional boundaries regarding free speech.

An experienced criminal defense attorney can review the digital evidence, contest allegations of malicious intent, and construct a robust defense strategy to shield you from jail time and staggering financial liability.

Contact the Esfandi Law Group today at (310) 274-6529 to set up a free, confidential consultation and safeguard your future.

Doxing