As we reported here, the final days of the 2019 California legislative session are winding down, with important amendments to the California Consumer Privacy Act (CCPA) still pending.  In Thursday’s Senate session, AB 1130 was passed, which amends the state’s data breach notification law.   The amendment would include passports, biometric data, and taxpayer and military identification numbers to the definition of “personal information” requiring notice under the breach notification law if breached.    The bill passed the California Senate on a 25-12 party line vote, with Democrats in favor and Republicans opposed.  Business groups in California opposed the expansion of the definition, which may increase business liability for breaches when combined with the private right of action in the CCPA.

The bill now goes back to the Assembly for final passage and, since it passed the Assembly in May, it is expected to go to Governor Gavin Newsom’s desk for signature.   The Governor has until October 13 to sign any bills delivered to him by the California Legislature.

We will continue to follow the waning days of the legislative session in Sacramento and provide updates on the CCPA amendments when available.