In what appears to be yearly tradition, the California State
Senate has again amended its Data Breach Notification Law. [Civ.
Code § 1798.29.] On Sept. 11, 2019, the California State
Senate voted in favor of AB-1130 Personal information: data breaches,
which expands the existing definition of "personal
information" under California's Data Breach Notification
Law. Assuming the governor signs AB-1130 before the Oct. 13, 2019
deadline, personal information under California's Data Breach
Notification Law will now include (1) unique biometric data, and
(2) government-issued identification numbers, such as passport
numbers.
Closing a Gap
AB-1130 seeks to close openings within California's Data
Breach Notification Law. The current law requires any agency,
person, or business that owns or licenses computerized data that
includes personal information to disclose a breach of the security
of the system to any California resident whose unencrypted personal
information was or
