Did you know: Companies that do business in California now have one more thing to worry about following a data breach: an increased risk of litigation.
The California Consumer Privacy Act includes a private right of action and statutory damages that are expected to invite individual and class actions against businesses that allow unauthorized access to individuals’ non-encrypted or unredacted personal information because of a failure to implement appropriate security practices.
A data breach involving 10,000 customers could result in statutory damages of up to $7.5 million.