United States California Code § Notify an individual if their Personal information, Criminal penalties Lower — California 1798.29(a) and 1798.82(a) unencrypted personal defined as an individual’s and ability under law notification information is acquired name in combination to sue breaching threshold, but (many other US states have without authority with any one or more of organisations applies to a implemented variations on the following data narrower range this model) Notify the Attorney General elements, when either of information if a data breach affects more the name or the data than 500 individuals Encryption elements are not provisions similar encrypted: to how the draft social security Bill deals with number assessing the risk drivers’ license of harm number Two-tier account number, notification credit or debit card system number in combination with an access code medical information health insurance Information Any combination of a user name or email address and access credentials also falls under the definition
United States — California California Code § 1798.29(a) and 1798.82(a) (many other US states have implemented variations on this model) Notify an individual if their unencrypted personal information is acquired without authority Notify the Attorney General if a data breach affects more than 500 individuals Personal information, defined as an individual’s name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: social security number drivers’ license number account number, credit or debit card number in combination with an access code medical information health insurance Information Any combination of a user name or email address and access credentials also falls under the definition Criminal penalties and ability under law to sue breaching organisations Lower notification threshold, but applies to a narrower range of information Encryption provisions similar to how the draft Bill deals with assessing the risk of harm Two-tier notification system
Consultation-draft-data-breach-notification-2015-discussion-paper.DOCX