Reflecting on data privacy at state and county levels

With National Data Privacy Day coming up on Sunday, I've been thinking about all the in-roads we've made over the years on privacy and consumer protection in both Santa Clara County and our state.

As our world becomes more and more technologically advanced, we have to keep pace in protecting and securing our data and privacy. And as our lives become increasingly intertwined with digital platforms, safeguarding our personal information is no longer just a matter of choice; it's necessary to preserve our fundamental rights. This quickly became apparent to me when I served in the California State Legislature.

As chair of the Legislature's Select Committee on Privacy, I introduced first-in-the-nation legislation on data privacy/electronic identity theft. Assembly Bill 700 (and its twin, Senate Bill 1386) made California the first state to mandate data breach notification, requiring businesses and state agencies to inform consumers when a security breach compromises their personal information. While novel at the time, all 50 states have since adopted similar laws. Thanks to laws like these, hundreds of millions of Americans have been notified that their personal information was exposed, giving them the notice and opportunity they need to protect themselves. It also prompted countless organizations large and small to make cybersecurity a business priority.

Then, in the state Senate, I pushed further, authoring SB 24, which enhanced consumer privacy protection when sensitive data is lost or stolen. Signed into law in 2011, it established standard information that all businesses must provide to consumers about a breach. It also required data holders to send an electronic copy of the notification to the Attorney General. This additional notification gives law enforcement the ability to see the big picture, better understand the patterns and practices of identity theft statewide and then take steps to protect the public.