California SB 1386 - Disclosing a security breach of personal information.
On July 1, 2003, California Senate Bill 1386 went into effect. This law focuses on reducing identity theft that is plaguing California citizens.

California SB 1386 calls for every business or state agency that conducts business within California to notify those residents whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. The new law provides for civil damages as well as criminal prosecution.

Improving your network security can be less costly than reacting to a security breach and having to disclose that your business was not secure. The proactive security measure is to identify where your vulnerabilities are and mitigate them as quickly as possible. NCX Group offers a thorough security risk assessment Secure24 that's tailored to the size of your business to comply with SB 1386. Identifying the areas of risk to meet compliance not only represents due diligence, but provides a clear path to mitigating the deficiencies.

For information on NCX Group's Secure24 Comprehensive Security Review, please click here.

California's SB 1386 is a sweeping measure that mandates public disclosure of computer-security breaches in which confidential information of ANY California resident MAY have been compromised.

	Who is Affected? Every enterprise, public or private, doing business with California residents.
	What's Covered? Confidential information about any California resident, including Social Security numbers, California Driver's License numbers, Account numbers, and Credit or Debit card numbers.
	Key Dates July 1, 2003 Organizations became bound by the law.
	Penalties for non-compliance Companies and organizations that fail to disclose computer security breaches become liable for civil damages or face class actions.
	What can you do? Improving your network security is always cheaper than reacting to a security breach. Understanding and controlling the threats to confidential information requires continuous risk management. Key aspects of mitigating these risks are: Obtain regular independent information security evaluations. Implement controls that assess information security risks. Document and review information security processes.
	Other SB 1386 Resources These links will open in a new window California State Government site on SB 1386 California Attorney General site on SB 1386 notifications

This information is provided as a service based on NCX Group's interpretation of SB 1386. NCX Group, Inc. assumes no liability for any errors, omissions or misinterpretations arising from this information. Always consult an attorney for specific legal information.

Return to Security Compliance Home Page