Digital Policy Alert logo

United States of America: Law on Data Breaches: Customer Notification (SB 446) enters into force

Policy overview

Description

Law on Data Breaches: Customer Notification (SB 446) enters into force

On 1 January 2026, the Law on Data Breaches: Customer Notification (SB 446) enters into force, amending Section 1798.82 of the Civil Code. The law requires that individuals or businesses conducting business in California must disclose a breach of se…

Scope

Policy Area
Data governance
Policy Instrument
User/subject right
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2025-02-18
under deliberation

On 18 February 2025, the Bill amending the Civil Code to include a provision on customer notificati…

2025-05-28
under deliberation

On 28 May 2025, the Bill amending the Civil Code to include a provision on customer notification fo…

2025-08-28
adopted

On 28 August 2025, the Bill amending the Civil Code to include a provision on customer notification…

2025-10-03
adopted

On 3 October 2025, the Bill amending the Civil Code to include a provision on customer notification…

2026-01-01
in force

On 1 January 2026, the Law on Data Breaches: Customer Notification (SB 446) enters into force, amen…