The California legislature passed the nation’s first data breach notification statute in 2003, the California Data Protection Act (CDPA). Since this landmark legislation was enacted, over 30 states have passed similar statutes. The law is another example of California's trendsetting legislation in the area of privacy. What the CDPA requires The CDPA requires that any business that “owns or licenses personal information about a California resident shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the personal information from unauthorized access, destruction, use, modification, or disclosure.” Further, it requires a business... READ MORE