Cybersecurity.

Existing law requires any agency that owns or licenses computerized data that includes personal information, as defined, to disclose expeditiously and without unreasonable delay a breach in the security of the data to a resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, or whose encrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, the encryption key or security credential was, or is reasonably believed to have been, acquired by an unauthorized person, and the agency that owns or licenses the encrypted information has a reasonable belief that…