California's Data Breach Laws Strengthened

California enacted a data-breach-notification law in 2002 requiring that companies notify consumers when a breach occurred. A new law (formerly S.B. 24) strengthens existing law by requiring that companies notify consumers in plain language of the name and contact information for the company holding the data, the types of personal information compromised, contact information for a major credit reporting agency, and whether notification was delayed due to a law enforcement investigation.