Which law requires notification to affected persons if a database breach occurs in California?

Which law requires notification to affected persons if a database breach occurs in California?

• A. California Data Privacy Act
• B. California Consumer Privacy Act
• C. California Security Breach Information Act
• D. Data Breach Notification Act

Answer: (C)

When a breach of security occurs, California has a specific rule that requires telling the affected individuals about what happened. The California Security Breach Information Act is the statute built for that purpose. It requires entities that handle California residents’ personal information to notify those individuals promptly if unencrypted information has been accessed or acquired by someone who isn’t authorized. The goal is to give people a chance to protect themselves, such as by monitoring accounts or changing passwords. This law focuses on the act of notifying in the event of a breach, rather than on privacy rights or how data is collected and used—that’s what privacy laws like the California Privacy Act address. So, when the question asks which law requires notification to affected persons after a database breach in California, the Security Breach Information Act is the appropriate reference.

When a breach of security occurs, California has a specific rule that requires telling the affected individuals about what happened. The California Security Breach Information Act is the statute built for that purpose. It requires entities that handle California residents’ personal information to notify those individuals promptly if unencrypted information has been accessed or acquired by someone who isn’t authorized. The goal is to give people a chance to protect themselves, such as by monitoring accounts or changing passwords. This law focuses on the act of notifying in the event of a breach, rather than on privacy rights or how data is collected and used—that’s what privacy laws like the California Privacy Act address. So, when the question asks which law requires notification to affected persons after a database breach in California, the Security Breach Information Act is the appropriate reference.