AB 83: Personal data.

Existing law requires a person or business that owns, licenses, or maintains personal information, as defined, about a California resident to implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the personal information from unauthorized access, destruction, use, modification, or disclosure.

This bill would expand the definition of personal information for purposes of these provisions to include any unique an individual tax identification number, passport number, military identification, number government-issued employment identification number, an individuals geophysical location, health insurance, geolocation information, or biometric information, or an individuals signature. information. The bill would also define reasonable security procedures and practices for purposes of these provisions as requiring, at a minimum, requiring security of personal information to the degree that any reasonably prudent business would provide, as specified.