Skip to content

SC Magazine: Bill to bolster California breach law awaits governor


Friday, September 11, 2009

by Dan Kaplan, SC Magazine

A new Senate bill in California, which seeks to complement the state’s trailblazing SB-1386 data breach disclosure bill, is ready for Gov. Arnold Schwarzenegger’s signature.

The new legislation, SB-20, builds on the 2003 bill by requiring that breach notification letters also contain specifics around the data-loss incident, including the type of personal information exposed, a description of the incident and advice on steps to take to protect oneself from identity theft. The law also would require that organizations that suffer a breach affecting 500 or more people must submit a copy of the alert letter to the state attorney general’s office.

“Experience over the past half dozen years indicates that too often, the information received [in the letter] is confusing, not clarifying,” state Democratic Sen. Joe Simitian, author of both bills, said this week in a news release. “SB-20 ensures that notice of a security breach will be genuinely helpful to consumers.”

Read the full article on the SC Magazine website