Privacy: personal information: breach: notification.

Existing law requires a person or business conducting business in California or an agency that owns or licenses computerized data that includes personal information, as defined, to disclose a breach in the security of the data to a resident of California whose encrypted or unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person, as specified. If the breach exposed a social security number, a driver's license, or a California identification card number, existing law requires the notification to include the toll-free telephone numbers and addresses of the major credit reporting agencies. This bill would, if the security breach exposed a social security number, a driver's license number, or a California identification card number, require the notice to also include the Internet Web site address of each of the major credit reporting agencies and a notice instructing the affected person that information related to security freezes and fraud alerts is available from the major credit reporting agencies.