California Adopts "Do Not Track" and Expanded Data Breach Notification Laws

On Friday California Governor Jerry Brown signed into law the second and third of a cluster of four privacy and data security bills recently passed by the state legislature, continuing California's role as among the most active states in extending the reach of on-line privacy and information security regulation. The laws signed on Friday (i) require commercial websites and on-line services to disclose their policies concerning tracking of consumers' on-line activities and (ii) expand the scope of California's data breach notification law to include email addresses and login credentials that, in combination, could allow access to on-line accounts. A few days earlier, the Governor approved a law (iii) restricting the ability of commercial websites, on-line services, and on-line and mobile applications to advertise to children; to use, disclose, or compile minors' personal information; or to allow others to do so. Still awaiting the governor's signature or veto is a bill