Search

By Lauri Floresca

Companies doing business online just became a lot more vulnerable. In September, amendments were made to the California Database Breach Act (SB 1386) through Senate Bill 46, which expanded the definition of what constitutes compromised personal information to include a user name or email address, in combination with a password or security question and answer that would permit access to an online account. What that means for any business that collects this type of information is that its now liable to comply with the strict guidelines under the California Database Breach Act, including how the business notifies consumers about a data breach.