Notifications of Security Breaches

LogError writes "On July 1, 2003, Senate bill 1386 becomes Civil Code 1798.82. In a nutshell, the law states that any person or company doing business in the state of California is responsible for notifying California residents of security breaches to their non-encrypted information. It is important to note that the actual breach does not need to occur in the state of California for the law to apply."

Comments

Re:I can see it now

[GrandCow]

Actually... now that I think about it, I could possibly see a spam company getting with a large corporation, setting up a false break in, and sending the email to everyone in the company with their product (which was required by law to be sent) with the security breach message at the bottom.

"Just trying to save you some time by combining these 2 emails into 1"

Does this apply to California Government?

[WC as Kato]

Remember when Slashdot reported that the State of California got a database hacked and had the identity of all of their government employee's data comprimised?

So with this law, the State of California would notify their employees that hackers have their data. Well, technically they did what they are proposing. Too bad this was after the Sacramento Bee newspaper reported it first! At least they provide a government link for help.

When this law passes, the State of California should sue themselves into compliance!