Existing law regulating consumer credit reporting agencies provides as its purpose to require, among other things, that these agencies adopt reasonable procedures for meeting the needs of commerce for consumer credit in a manner that is fair and equitable to the consumer with regard to the confidentiality of such information and in a manner that will best protect the interests of the people of the state. Existing law requires a person or business that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, or, whose encrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person and the encryption key or security credential was, or is reasonably believed to have been, acquired by an unauthorized person and the agency that owns or licenses the encrypted information has a reasonable belief that the encryption key or security credential could render that personal information readable or useable. Existing law requires the disclosure to be made in the most expedient time possible and without unreasonable delay, as specified. Existing law authorizes any customer who is injured by a violation of these provisions to institute a civil action to recover damages.
Existing law regulating consumer credit reporting agencies provides as its purpose to require, among other things, that these agencies adopt reasonable procedures for meeting the needs of commerce for consumer credit in a manner that is fair and equitable to the consumer with regard to the confidentiality of such information and in a manner that will best protect the interests of the people of the state. Existing law requires a person or business that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, or, whose encrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person and the encryption key or security credential was, or is reasonably believed to have been, acquired by an unauthorized person and the agency that owns or licenses the encrypted information has a reasonable belief that the encryption key or security credential could render that personal information readable or useable. Existing law requires the disclosure to be made in the most expedient time possible and without unreasonable delay, as specified. Existing law authorizes any customer who is injured by a violation of these provisions to institute a civil action to recover damages.
Version chain
The bill's text revisions, in order — the diff chain from filing to enrollment.
Do pass, but first be re-referred to the Committee on [Appropriations] — 5–2 (pass) · upper
Sponsors
Chau — primary (person)
Timeline
The legislative action history — every referral, reading, and vote.
2018-01-10 Read first time. To print. reading-1
2018-01-11 From printer. May be heard in committee February 10.
2018-01-29 Referred to Coms. on P. & C.P. and JUD. referral-committee
2018-04-02 In committee: Hearing postponed by committee.
2018-04-18 From committee: Amend, and do pass as amended and re-refer to Com. on JUD. (Ayes 9. Noes 1.) (April 17). amendment-passage, committee-passage, amendment-introduction
2018-04-19 Read second time and amended. reading-1, amendment-passage, reading-2
2018-04-23 Re-referred to Com. on JUD. referral-committee
2018-05-02 From committee: Amend, and do pass as amended. (Ayes 8. Noes 2.) (May 1). amendment-passage, committee-passage, amendment-introduction
2018-05-03 Read second time and amended. Ordered returned to second reading. reading-1, amendment-passage, reading-2
2018-05-07 Read second time. Ordered to third reading. reading-2, reading-1
2018-05-31 Read third time. Passed. Ordered to the Senate. (Ayes 57. Noes 15. Page 5585.) reading-3, passage, reading-1
2018-06-04 In Senate. Read first time. To Com. on RLS. for assignment. reading-1
2018-06-13 Referred to Coms. on JUD. and APPR. referral-committee
2018-06-27 From committee: Do pass and re-refer to Com. on APPR. (Ayes 5. Noes 2.) (June 26). Re-referred to Com. on APPR. committee-passage-favorable, committee-passage, referral-committee
2018-08-06 In committee: Referred to APPR. suspense file. referral-committee
2018-08-17 From committee: Amend, and do pass as amended. (Ayes 5. Noes 2.) (August 16). amendment-passage, committee-passage, amendment-introduction
2018-08-17 Read second time and amended. Ordered returned to second reading. reading-1, amendment-passage, reading-2
2018-08-20 Read second time. Ordered to third reading. reading-2, reading-1
2018-08-22 Read third time and amended. Ordered to second reading. amendment-passage, reading-3, reading-1
2018-08-23 Read second time. Ordered to third reading. reading-2, reading-1
2018-08-27 Read third time. Passed. Ordered to the Assembly. (Ayes 39. Noes 0. Page 5817.). reading-3, passage, reading-1
2018-08-27 In Assembly. Concurrence in Senate amendments pending. May be considered on or after August 29 pursuant to Assembly Rule 77.
2018-08-29 Senate amendments concurred in. To Engrossing and Enrolling. (Ayes 80. Noes 0. Page 6830.). committee-passage-favorable, amendment-passage
2018-09-06 Enrolled and presented to the Governor at 3 p.m.
2018-09-19 Approved by the Governor. executive-signature
2018-09-19 Chaptered by Secretary of State - Chapter 532, Statutes of 2018.
Source
OpenStates / OpenCivicData bulk snapshot 2026-07-01; origin ocd-bill/66078aef-f3f8-458f-bb41-b1f2ac87b64a. Confidence: reported (aggregated from official California legislature records).
Fabio