Personal information: data breaches: genetic information.

Existing law requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices. Existing law requires a person or business that conducts business in California, and that owns or licenses computerized data that includes personal information, to disclose a breach of the security of the system following discovery or notification of the breach. This bill would revise the definition of personal information for purposes of the provisions described above to include genetic information. The bill would define genetic information for these purposes to mean an individual's genetic tests, the genetic tests of family members of an individual, or the manifestation of a disease or disorder in family members of the individual.