On August 31, 2011, California Governor Edmund G. Brown, Jr., signed into law Senate Bill 24. The new law, which goes into effect January 1, 2012, amends the California data breach notification statute, Section 1798.82 of the California Civil Code, to require specific content in notices to affected individuals. Notices to individuals must include, among other items, a general description of the incident, list of types of information involved in the breach, and date of the breach.

The new law will also require companies to notify the California Attorney General when a breach affects more than 500 residents of California.