California Governor Jerry Brown signed Senate Bill 46 (S.B. 46) (PDF) into law
on Friday, September 27, 2013. The new law expands the
current breach notification requirement to include a known breach
of a security system, not just a confirmed loss of Social Security,
driver's license numbers, credit card numbers, or medical and
health insurance information.
Starting on January 1, 2014, governmental agencies and any
person or business that conducts business in California and that
owns or licenses computerized data that includes personal
information will be required to notify consumers of any breach of
the security of the system following discovery or notification of
the breach in the security of the data to any resident of
California whose unencrypted personal information was, or is
reasonably believed to have been, acquired by an unauthorized
person. Much of the text of the new law has been reformatted and
provided below to give the reader an easily digestible
