California’s Notice of Breach (previously Senate Bill 1386) law requires that any state agency or California business disclose the breach of security of personal data to any California resident whose unencrypted information was acquired by an unauthorized person. The law covered financial records only until recently, but has now been amended to include medical information as well.