California Expands Its Privacy Laws Regarding Data Breach Notice


In less than two months, when S.B. 46 becomes effective on January 1, 2014, California will extend its data breach notification requirements to a new area: individual online user accounts. Clients should take note of this significant development. It is a substantial enlargement of the notification burdens that many companies face (in particular, companies that conduct business in California and that own or license computerized data including personal information), and is indicative of, and may prefigure, other jurisdictions’ efforts to update their privacy laws to ensure online privacy in emerging areas.

S.B. 46 Broadens California’s Current Data Breach Notification Requirements Under current California law, a business that owns or licenses computerized “personal information” must “disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person.” “Personal information” means “an individual’s first name or first initial and last name” in combination with one or more additional data elements. These data elements include a variety of individual identifiers: social security numbers; driver’s license or state identification card numbers; bank-, credit-, or debit-card numbers (when combined with the account’s access or security code, or password); medical information; and health insurance information. “Personal information” does not include information that is publicly available through federal, state, or local government records...

Please see full alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© King & Spalding | Attorney Advertising

Written by:


King & Spalding on:

JD Supra Readers' Choice 2016 Awards
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.