Calif. amends data breach law.

• Position: DATA SECURITY - Legislation - Brief article

[ILLUSTRATION OMITTED]

California passed the first data breach notification law in the United States in 2002 (SB 1386). Nearly every state has followed with its own version.

Over the past few years, California lawmakers have passed several bills aimed at amending California's breach notification law to add a regulator notice provision and to require the inclusion of certain content, according to The Information Law Group. However, former Gov. Arnold Schwarzenegger vetoed the bills at least three times. Earlier this year, a Senate bill (SB 24) was introduced to enact such changes, and in August, current Gov. Jerry Brown signed it into law.

SB 24, which takes effect Jan. 1, 2012, requires data breach notifications to include a general description of the incident, the type of information breached, the time of the breach, and the toll-free telephone numbers and addresses of...