California Attorney General, Xavier Becerra, introduces a new bill requiring companies to notify data subject if their passport and government ID numbers, along with biometric data, such as fingerprints, and iris and facial recognition scans, have been stolen.

This will expand the California Consumer Privacy Act (CCPA) and bring it to align more with EU GDPR.

See the discussion on the Bill