California Governor Jerry Brown signed into law SB 24, which requires security breach notifications to be written in plain language and include specified information including the nature of the breach and contact information that allows the affected person to take corrective action.

Previously, while notifications were required to be sent, the content of those letters was left up to each individual entity. SB 24 makes clear what information should be included in notification letters and to mandate that notices be written in plain language. The notification letters must include the type(s) of personal information affected, the data or data range of the breach, and the date of the notice among other criteria.

This bill will help enhance consumer safety, public awareness, and government transparency.