Privacy: personal information: breach: disclosure.

Existing law requires a person or business conducting business in California that owns or licenses computerized data that includes personal information, as defined, to disclose a breach in the security of the data to a resident of California whose encrypted or unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, as specified. Existing law requires that disclosure to be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement or any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.