New legislation aims to protect California consumers against data breaches.
Democratic Assemblyman Roger Dickinson says his bill would limit the kind of information that companies could store and require businesses to notify customers of a breach within 15 days.
"Since July 18, 2013, Privacy Rights Clearing House has identified over 300 United States data breaches in which consumers' personal information was compromised," Dickinson said.
He says of the dozens of companies which have seen breaches, only a small portion of them detected it on their own.
The bill would also mandate that businesses provide identity theft services at no cost to those who were affected.