Identity theft: local agencies.

Existing law requires any state office, officer, or executive agency that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. This bill would expand this disclosure requirement to apply to a breach of computerized data that is owned or licensed by a local agency. The bill would create a state-mandated local program by imposing new duties on local agencies. This bill would incorporate additional changes to Section 1798.29 of the Civil Code proposed by SB 46 that would become operative if this bill and SB 46 are enacted and this bill is enacted last. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to these statutory provisions.