California Senate Bill No. 1386

California Senate Bill No. 1386 was passed in 2003. It requires any corporation that discloses unencrypted personal information for a California resident due to a security breach that leads to the data being acquired by an unauthorized person to disclose the breach to the person to whom the information concerns. Personal information is defined rather narrowly as the person's name in conjunction with his or her social security number, driver's license number, or banking/credit account number (with any needed access codes).