Privacy: personal information.

Existing law requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the personal information from unauthorized access, destruction, use, modification, or disclosure. Existing law defines terms for purposes of this law, including "personal information." This bill would revise the definition of personal information to include health insurance information, as defined, and a username or email address combined with a password or security question and answer for access to an online account.