Exam CIPP-US topic 1 question 88 discussion

What is required or prohibited? This law requires all persons to disclose any breach of system security to any “Resident of California” whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person Why does this law exist? SB 1386 was enacted because security breaches of computerized databases are feared to cause identity theft and individuals should be notified about these breaches so they can take steps to protect themselves. Anyone with a security breach that puts people at real risk of identity the should consider notifying them even if they are not subject to this law.

SB 1386 went into affect on July 1, 2003. Under the law, covered parties must disclose any breach of the security of personal data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person.