Cal. Civ. Code § 5230

5230.    (a) The association records, and any information from them, may not be sold, used for a commercial purpose, or used for any other purpose not reasonably related to a member’s interest as a member. An association may bring an action against any person who violates this article for injunctive relief and for actual damages to the association caused by the violation. (b) This article may not be construed to limit the right of an association to damages for misuse of information obtained from the association records pursuant to this article or to limit the right of an association to injunctive relief to stop the misuse of this information. (c) (1) An association or its managing agent shall not do either of the following: (A) Sell a member’s personal information for any purpose without the consent of the member. (B) Transmit a member’s personal information to a third party without the consent of the member unless required to do so by law, including, but not limited to, Article 5 (commencing with Section 5200). (2) A member may bring an action against an association that violates this subdivision for injunctive relief and actual damages caused by the violation. A member shall be entitled to recover reasonable costs and expenses, including reasonable attorney’s fees, in a successful action to enforce the member’s rights under this subdivision. (d) An association shall be entitled to recover reasonable costs and expenses, including reasonable attorney’s fees, in a successful action to enforce its rights under this article.