CA AB83

Expands the definition of "personal information" to include tax identification numbers, passport numbers, military identification numbers, government-issued employment identification numbers, geolocation information, and biometric information.

Removes signature from the list of personal information data elements and clarifies that "geolocation information" does not include emergency 911 communications or communication contents.

Defines "biometric information" as automatic measurements of fingerprints, voice prints, eye retinas or irises, identifying DNA information, or unique facial characteristics used to authenticate an individual's identity.

Defines "reasonable security procedures and practices" as security of personal information to the degree that any reasonably prudent business would provide, requiring businesses to identify risks, establish safeguards, and regularly assess their sufficiency.

Requires businesses to consider the type of personal information, foreseeability of threats, widely accepted safeguarding practices, implementation costs, and business size when determining appropriate security measures.