CA AB2678

Amends California Civil Code sections 1798.29 and 1798.82 to expand data breach notification requirements for agencies and businesses that own or license personal information.

Requires breach notifications that expose social security numbers, driver's license numbers, or California identification card numbers to include the Internet Web site address of each major credit reporting agency in addition to toll-free telephone numbers and mailing addresses.

Mandates inclusion of a notice instructing affected persons that information related to security freezes and fraud alerts is available from major credit reporting agencies.

Applies to both government agencies and private businesses conducting business in California that experience security breaches of computerized data containing personal information.