Privacy: breach.

Existing law, the Information Practices Act of 1977, requires an agency, which includes a local agency, that owns or licenses computerized data that includes personal information, as defined, to disclose expeditiously and without unreasonable delay a breach in the security of the data to a resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, or whose encrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, and the encryption key or security credential was, or is reasonably believed to have been, acquired by an unauthorized person, and the agency…