SB 446: Data breaches: customer notification.
This bill aims to amend the existing law regarding data breaches in California. It requires that data breach disclosure be made within 30 calendar days of discovery or notification of the breach, unless it's necessary to accommodate law enforcement needs or determine the scope of the breach. The law also requires that a single sample copy of the security breach notification be submitted to the attorney general within 15 calendar days of notifying affected consumers. This change is intended to simplify the process and reduce the workload on businesses affected by data breaches.
| Oct. 03, 2025 | Chaptered by Secretary of State. Chapter 319, Statutes of 2025. |
| Oct. 03, 2025 | Approved by the Governor. |
| Sep. 03, 2025 | Enrolled and presented to the Governor at 11 a.m. |
| Aug. 28, 2025 | Read third time. Passed. (Ayes 74. Noes 0. Page 2776.) Ordered to the Senate. |
| Aug. 28, 2025 | In Senate. Ordered to engrossing and enrolling. |