Health & Saf. Code, § 114381

(a) A food facility shall not be open for business without a valid permit.

(b) A permit shall be issued by the enforcement agency when investigation has determined that the proposed facility and its method of operation meet the specifications of the approved plans or conform to the requirements of this part.

(c) A permit, once issued, is nontransferable. A permit shall be valid only for the person, location, type of food sales, or distribution activity and, unless suspended or revoked for cause, for the time period indicated.

(d) Any fee for the permit or registration or related services, including, but not limited to, the expenses of inspecting and impounding any utensil suspected of releasing lead or cadmium in violation of Section 108860 as authorized by Section 114393, review of HACCP plans, and alternative means of compliance shall be determined by the local governing body. Fees shall be sufficient to cover the actual expenses of administering and enforcing this part. The moneys collected as fees shall only be expended for the purpose of administering and enforcing this part.

(e) A permit shall be posted in a conspicuous place in the food facility or in the office of a vending machine business.

(f) Any person requesting the enforcement agency to undertake activity pursuant to Sections 114149.1 and 114419.3 shall pay the enforcement agency’s costs incurred in undertaking the activity. The enforcement agency’s services shall be assessed at the current hourly cost recovery rate.

(g) (1) Except as otherwise required by state or federal law, an enforcement agency shall not provide voluntary consent to any individual to access, review, or obtain any of the enforcement agency’s records obtained pursuant to this part that include personally identifiable information of any sidewalk vendor or any operator or employee of a compact mobile food operation in the jurisdiction without a subpoena or judicial warrant. This section does not prohibit an enforcement agency from challenging the validity of a subpoena or judicial warrant in a federal district court.

(2) An enforcement agency and its personnel shall not disclose or provide in writing, verbally, or in any other manner, personally identifiable information of any sidewalk vendor or any operator or employee of a compact mobile food operation obtained pursuant to this part that is requested, except pursuant to a subpoena or a valid judicial warrant.

(h) For purposes of this section, “personally identifiable information” means an individual’s name, business name, home address, business address, birthdate, telephone number, business location, California driver’s license or identification number, individual taxpayer identification number, municipal identification number, government-issued identification number, consular identification, social media identifiers, employer identification number, business license number, seller’s permit number, social security number, vending registration certificate or license number, known place of work, income and tax information, and any other information that would identify the individual.