AB 259 Summary

• Requires agencies that are the source of a data breach exposing social security numbers, driver's license numbers, or California identification card numbers to offer identity theft prevention and mitigation services at no cost for at least 12 months

• Mandates agencies provide affected persons with all information necessary to take advantage of the identity theft protection services offered

• Applies to breaches of computerized data owned or licensed by agencies that compromise personal information of California residents

• Requires notification to the state Attorney General when a single breach affects more than 500 California residents