CA SB909

Requires investigative consumer reporting agencies to provide consumers with the Internet website address or telephone number where they can find information about the agency's privacy practices when procuring employment reports (operative January 1, 2012).

Mandates agencies to conspicuously post privacy practice information on their primary website describing how they prepare and process investigative consumer reports, or mail written privacy statements upon request if they lack a website.

Requires privacy statements to include disclosure of whether personal information will be transferred to third parties outside the United States or its territories, and contact information for agency representatives regarding privacy practices.

Establishes liability for investigative consumer reporting agencies when consumers are harmed by unauthorized access to personally identifiable information resulting from negligent preparation or processing of reports outside the United States or its territories, recoverable as actual damages plus attorney's fees and costs.