CA AB2455

Amends Section 1798.29 of the Civil Code to extend data breach notification requirements to local agencies, requiring them to disclose breaches of computerized data containing personal information to affected California residents

Requires agencies to notify residents in the most expedient time possible without unreasonable delay when unencrypted personal information is acquired by an unauthorized person

Mandates security breach notifications include plain language disclosures with agency contact information, types of data breached, date or date range of breach, and credit reporting agency contact information

Allows notification delays only when law enforcement determines notification would impede a criminal investigation

Defines "personal information" to include name combined with social security number, driver's license number, financial account numbers, medical information, or health insurance information when unencrypted