California bill spells out what companies have to say about data breaches

A co-author of the landmark data-breach notification law that took effect in California six years ago is now looking to add new requirements spelling out what companies have to tell affected individuals about breaches. The new bill, which was introduced by state Sen. Joe Simitian in December and is officially known as S.B. 20, also would require companies to report any data breaches affecting more than 500 California residents to the state's attorney general.

Read More