Editor’s note: Lothar Determann is the author of “California Privacy Law: Practical Guide and Commentary,” published by The Recorder and Law Journal Press. The book is a comprehensive guide for companies and their attorneys on risk prevention, response, litigation and proper navigation of federal and state privacy laws.
In 2002, California was the first worldwide to pass a law requiring businesses and agencies to notify data subjects of data security breaches. Since then, the state has regularly updated its data security breach notification law, including in 2015, as summarized in the last installment of this series. This article examines a few key requirements of California data security breach notification laws that have not changed as of Jan. 1, 2016:
