A press release by the California Department of Justice acknowledges that it leaked personal data on individuals applying for a concealed and carry weapons permit between 2011 and 2021.
The leaked data included “names, date of birth, gender, race, driver’s license number, addresses, and criminal history.”
The California Attorney General page on the California Consumer Privacy Act:
https://oag.ca.gov/privacy/ccpa
At least GDPR applies to public entities in Europe.