Skip to content

SearchCompliance: Data breach notification law SB 20 strikes right balance: Simitian

Monday, September 28, 2009

California State Sen. Joe Simitian could be called the father of state data breach notification laws. He received the award for Excellence in the Field of Public Policy at the RSA Conference 2007 in recognition of that—though he’s willing to share the credit. [...]
Last month a Simitian-sponsored amendment of the California law, known as Senate Bill 20, passed through the legislature and is now awaiting the signature of Gov. Arnold Schwarzenegger. SB 20 strengthens the notification requirements for breaches but still does not take steps to mandate how to prevent data breaches. In the interview excerpts that follow, Simitian discusses SB 20, where it fits into the evolving fabric of breach laws, and whether a federal law—or another state law—might be a better way to go.

Read the full interview at