California Legislature Working Through Data Privacy Amendments

As we reported here, the final days of the 2019 California legislative session are winding down, with important amendments to the California Consumer Privacy Act (CCPA) still pending. In Thursday's Senate session, AB 1130 was passed, which amends the state's data breach notification law. The amendment would include passports, biometric data, and taxpayer and military identification numbers to the definition of "personal information" requiring notice under the breach notification law if breached. The bill passed the California Senate on a 25-12 party line vote, with Democrats in favor and Republicans opposed.  Business groups in California opposed the expansion of the definition, which may increase business liability for breaches when combined with the private right of action in the CCPA.