Cyber Liability by state
California data breach notification law and cyber insurance
Direct answer
What is California's data breach notification law?
California's breach notification law (Cal. Civ. Code sect. 1798.82) requires businesses to notify affected residents in the most expedient time possible and without unreasonable delay, and not later than 30 calendar days after discovery or notification of the breach after a breach of personal information.
What the statute requires
California requires businesses to notify residents of breaches of unencrypted personal information within 30 days of discovery, and to send a copy of the notice to the Attorney General within 15 days of notifying consumers when more than 500 residents are affected. Cyber liability insurance commonly funds the forensics, legal review, and notification costs this statute drives, plus defense of regulatory and civil claims.
- Consumer notification deadline
- In the most expedient time possible and without unreasonable delay, and not later than 30 calendar days after discovery or notification of the breach
- Regulator notice
- Submit a copy of the notification to the California Attorney General within 15 days of notifying residents when a single breach requires notice to more than 500 California residents.
- Safe harbor
- Notification is not required if the compromised data was encrypted and the encryption key or security credential was not acquired.
- Enforcement
- Affected residents may bring a civil action to recover damages, and the Attorney General may seek injunctive relief for violations.
Statutes and sources
-
California Data Breach Notification Law
Cal. Civ. Code sect. 1798.82
Regulator: California Attorney General . Last verified 2026-07-29 from the official source .
Related California compliance pages
Cyber Liability in other states
- Alabama
- Alaska
- Arizona
- Arkansas
- Colorado
- Connecticut
- Delaware
- District of Columbia
- Florida
- Georgia
- Hawaii
- Idaho
- Illinois
- Indiana
- Iowa
- Kansas
- Kentucky
- Louisiana
- Maine
- Maryland
- Massachusetts
- Michigan
- Minnesota
- Mississippi
- Missouri
- Montana
- Nebraska
- Nevada
- New Hampshire
- New Jersey
- New Mexico
- New York
- North Carolina
- North Dakota
- Ohio
- Oklahoma
- Oregon
- Pennsylvania
- Rhode Island
- South Carolina
- South Dakota
- Tennessee
- Texas
- Utah
- Vermont
- Virginia
- Washington
- West Virginia
- Wisconsin
- Wyoming
Get California coverage handled
Share a few details and an agent will respond within one business day.