Data breaches: customer notification.
Vote required
Majority
Fiscal committee
No
Appropriation
No
Current location
Chaptered
Take action
Record your position on this measure.
Create an account to take a stance, submit a written position, or contact your legislator.
Progress
Where this bill stands in the legislative process.
- Introduced
- Passed Senate
- Passed Assembly
- To Governor
- Became Law
Overview
This bill updates California’s data breach notification law to require businesses to notify residents within 30 calendar days of discovering a data breach, down from the current requirement of 60 days. It allows for delays to accommodate law enforcement investigations or to properly assess the scope of the breach. The bill also mandates a more standardized notification format and requires businesses to submit a sample notification to the Attorney General within 15 days of notifying affected consumers.
Key provisions
- Requires data breach notifications to be sent within 30 calendar days of discovery.
- Allows for delays in notification to accommodate law enforcement or breach assessment.
- Mandates a standardized notification format with specific headings and content requirements.
- Requires businesses to submit a sample notification to the Attorney General within 15 days of consumer notification.
- Specifies criteria for what constitutes a ‘breach of the security of the system’.
- Defines ‘personal information’ to include various data elements, such as social security numbers and biometric data.
- Addresses notification methods, including written, electronic, and substitute notices.
- Provides an exception for compliance with the Health Insurance Portability and Accountability Act (HIPAA) for covered entities.
Who is affected
- Businesses that own or license computerized data containing personal information in California
Bill text
Read the latest version inline or switch to a previous version.
Text extraction is in progress. View the official source.
Sponsors
Official sponsors from legislative records.
1 on record
Primary sponsor
Arguments
Reasons offered for and against this legislation.
Arguments in favor
No arguments in favor have been submitted.
Submit yoursArguments opposed
No arguments opposed have been submitted.
Submit yours