California law SB1386 of 2003 (Personal Information: Privacy) requires that institutions storing financial data (including the University of California) disclose any breach of security for unencrypted personal data.
Personal information means an individual’s first name or initial, last name in combination with any one or more of the following:
- Social Security number
- Driver’s license number or California ID Card number
- Account number, credit or debit card number, in combination with any required security code, permitting access to an individual’s financial account
Take the appropriate precautions to ensure that the security of the information in your custody is not compromised.
- Do not download personally identifiable information to a portable device
- Shred all printouts containing sensitive information when no longer needed
