Thursday, May 26, 2022
  • How to Make Huge Money with Stock Photography
  • A Problem Like API Security: How Attackers Hack Authentication
  • RSA Conference 2022 Preview with ITSP Magazine
  • Popular Python package compromised: Don’t ‘Blindly Trust Open Source’
  • 10 Reasons Why Email Protection is Critical in 2022

Security Boulevard Logo

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library
  • Home
    • Cybersecurity News
    • Features
    • Industry Spotlight
    • News Releases
  • Security Bloggers Network
    • Latest Posts
    • Contributors
    • Syndicate Your Blog
    • Write for Security Boulevard
  • Events
    • Upcoming Events
    • Upcoming Webinars
    • On-Demand Events
    • On-Demand Webinars
  • Chat
    • Security Boulevard Chat
    • Marketing InSecurity Podcast
  • Library
  • Related Sites
    • Techstrong Group
    • Container Journal
    • DevOps.com
    • Security Boulevard
    • Techstrong Research
    • Techstrong TV
    • Devops Chat
    • DevOps Dozen
    • DevOps TV
    • Digital Anarchist
  • Media Kit
  • About Us

  • Analytics
  • AppSec
  • CISO
  • Cloud
  • DevOps
  • GRC
  • Identity
  • Incident Response
  • IoT / ICS
  • Threats / Breaches
  • More
    • Blockchain / Digital Currencies
    • Careers
    • Cyberlaw
    • Mobile
    • Social Engineering
  • Humor
Data Security SBN News Security Bloggers Network Threats & Breaches 

Home » Cybersecurity » Data Security » Proposed Bill Would Strengthen California’s Data Breach Notification Law

SBN

Proposed Bill Would Strengthen California’s Data Breach Notification Law

by David Bisson on February 22, 2019

A new bill would strengthen California’s data breach notification law by expanding the types of information of whose exposure businesses are legally obligated to inform their customers.

Cybersecurity Live - Boston

On 21 February, California Attorney General Xavier Becerra and Assembly Member Marc Levine (D-San Rafael) revealed AB 1130. This bill would require businesses to notify customers of a security incident that exposed their passport numbers and/or their biometric information such as a fingerprint or retina image.

This bill builds upon the State’s existing data breach notification law, which requires businesses to inform consumers of the acquisition of their Social Security Number, driver’s license number, credit card number, medical and health insurance information as well as other personal data by an unauthorized individual.

California enacted this original legislation in 2003, thereby becoming the first U.S. State to put a data breach notification law in place. Since then, it’s passed additional laws designed to uphold consumer privacy. For instance, California adopted data privacy protections and requirements similar to GDPR on 18 June 2018 when it passed AB 375 (the California Consumer Privacy Act of 2018). Just a few months later, the State enacted SB-327 (the “Security of Connected Devices” law), which requires manufacturers of connected devices to equip their products with “reasonable” security features.

According to a statement published by California’s Office of the Attorney General, a significant force behind the proposal of AB 1130 was the 2018 data breach at Starwood Hotels that compromised 25 million passport numbers along with 327 million records including guests’ names and addresses.

Attorney General Becerra is confident that AB 1130 would help better protect consumers going forward. As quoted in the statement:

Knowledge is power, and all Californians deserve the power to take action if their passport numbers or biometric data have been accessed without (Read more...)

*** This is a Security Bloggers Network syndicated blog from The State of Security authored by David Bisson. Read the original post at: https://www.tripwire.com/state-of-security/security-data-protection/proposed-bill-would-strengthen-californias-data-breach-notification-law/

February 22, 2019February 22, 2019 David Bisson California, Data breach, IT Security and Data Protection, Latest Security News, notification
  • ← Drupal releases security advisory for ‘serious’ Remote Code Execution vulnerability
  • How Will the Indian E-commerce Industry Grow in 2018 →

TechStrong TV – Live

Click full-screen to enable volume control
Watch latest episodes and shows

Subscribe to our Newsletters

Get breaking news, free eBooks and upcoming events delivered to your inbox.
  • View Security Boulevard Privacy Policy
  • This field is for validation purposes and should be left unchanged.

Most Read on the Boulevard

Flawed MFA Opens Doors to Ransomware
Zola Wedding App ‘Hacked’ — Victims Lose BIG Money
Cars in the Crosshairs: Automakers, Regulators Take on Cybersecurity
Don’t Let Your Business Be Held For Ransom(ware)
Process Automation and Cybersecurity
Cloud computing concentration and systemic risk
What’s the Latest on Cyber Talent and Staffing Shortages?
BSides Prishtina 2022 – Isuf Deliu’s ‘Ransomware-As-A-Service: Demystifying A Multi-Billion Dollar Industry’
BSides Prishtina 2022 – Arian Sheremeti’s ‘Understanding Cyber Security Threats And Challenges In Protecting Critical Infrastructure’
XKCD ‘Mainly Known For’

Upcoming Webinars

Thu 26

Challenges and Opportunities for Improving Secure Coding Practices

May 26 @ 3:00 pm - 4:00 pm
Tue 31

Leveraging a Cloud Data Platform to Respond to Cybersecurity Events

May 31 @ 11:00 am - 12:00 pm
Jun 01

The 2022 Guide to API Security

June 1 @ 11:00 am - 12:00 pm
Jun 01

Security From Code to Cloud and Back to Code

June 1 @ 1:00 pm - 2:00 pm
Jun 08

Beyond Unification: How CNAP Should Reduce Cloud Security Risk

June 8 @ 11:00 am - 12:00 pm
Jun 08

When Less Is More: Full Life Cycle Serverless Security

June 8 @ 1:00 pm - 2:00 pm
Jun 15

Top 5 Reasons Why Effective SDLC Security Controls Are So Difficult

June 15 @ 1:00 pm - 2:00 pm
Jun 21

Why Cloud-Native Applications and APIs Are at Risk

June 21 @ 1:00 pm - 2:00 pm
Jun 28

CISO Talk Master Class Episode: Catch Lightning in a Bottle – The Essentials: Bringing It All Together

June 28 @ 1:00 pm - 2:00 pm

More Webinars

Download Free eBook

Managing the AppSec Toolstack

Industry Spotlight

Cars in the Crosshairs: Automakers, Regulators Take on Cybersecurity
Cybersecurity Governance, Risk & Compliance Industry Spotlight IoT & ICS Security Security Awareness Security Boulevard (Original) Threat Intelligence 

Cars in the Crosshairs: Automakers, Regulators Take on Cybersecurity

May 23, 2022 Mike Hodge | 2 days ago 0
Establishing a Root of Trust in Embedded Linux and IoT
Cybersecurity Endpoint Industry Spotlight IoT & ICS Security Security Boulevard (Original) Vulnerabilities 

Establishing a Root of Trust in Embedded Linux and IoT

April 18, 2022 Anita Buehrle | Apr 18 Comments Off on Establishing a Root of Trust in Embedded Linux and IoT
Attorney-Client Privilege and Email Privacy
Cybersecurity Data Security Identity & Access Industry Spotlight Network Security Security Boulevard (Original) 

Attorney-Client Privilege and Email Privacy

April 7, 2022 Mark Rasch | Apr 07 Comments Off on Attorney-Client Privilege and Email Privacy

Top Stories

Zola Wedding App ‘Hacked’ — Victims Lose BIG Money
Analytics & Intelligence Application Security Cloud Security Cybersecurity Data Security Featured Governance, Risk & Compliance Identity & Access Incident Response Mobile Security Most Read This Week Network Security News Popular Post Security Boulevard (Original) Social Engineering Spotlight Threat Intelligence Threats & Breaches Vulnerabilities 

Zola Wedding App ‘Hacked’ — Victims Lose BIG Money

May 24, 2022 Richi Jennings | 1 day ago 0
Oracle Adds Services to Strengthen Cloud Security
Application Security Cloud Security Cybersecurity Featured Network Security News Security Boulevard (Original) Spotlight 

Oracle Adds Services to Strengthen Cloud Security

May 24, 2022 Michael Vizard | 1 day ago 0
US Lawmakers Seek Uniform Policy on Nation-State Cyberattacks
Analytics & Intelligence Cyberlaw Cybersecurity Featured Governance, Risk & Compliance News Security Boulevard (Original) Threats & Breaches 

US Lawmakers Seek Uniform Policy on Nation-State Cyberattacks

May 20, 2022 George V. Hulme | May 20 0

Security Humor

Joy Of Tech® ‘Monkeypox Report'

Joy Of Tech® ‘Monkeypox Report’

Security Boulevard Logo White

DMCA

Join the Community

  • Add your blog to Security Bloggers Network
  • Write for Security Boulevard
  • Bloggers Meetup and Awards
  • Ask a Question
  • Email: [email protected]

Useful Links

  • About
  • Media Kit
  • Sponsors Info
  • Copyright
  • TOS
  • DMCA Compliance Statement
  • Privacy Policy

Related Sites

  • Techstrong Group
  • Container Journal
  • DevOps.com
  • Techstrong Research
  • Techstrong TV
  • DevOps Chat
  • DevOps Dozen
  • DevOps TV
  • Digital Anarchist
Powered by Techstrong Group
Copyright © 2022 Techstrong Group Inc. All rights reserved.

API Poll

Step 1 of 5

20%
Do you have an API security project in 2022?
Who is responsible for API Security?
What is your API security maturity?
What is your top 3 concerns regarding API security? (select 3)
Which API Security practices do you follow most? (select all that apply)
This field is for validation purposes and should be left unchanged.