Table of Contents Chapter 1 1-1 California Privacy Law Overview 1-2 CALIFORNIA 1-2:1 Laws Made by California 1-2:2 Scope and Applicability of California Laws 1-2:2.1 Limitations on California Jurisdiction Under International Law 1-2:2.2 Limitations on California Jurisdiction Under U.S. Federal Law 1-2:2.3 California Conflict of Law Rules 1-2:2.4 Enforceability of California Laws Outside California 1-3 PRIVACY 1-3:1 Rights to Privacy and Data Privacy 1-3:2 Data Privacy and Data Protection 1-3:3 Property 1-3:4 Free Speech, Information 1-4 LAW 1-5 CALIFORNIA PRIVACY LAW SUMMARY 1-5:1 Scope 1-5:2 Terminology 1-5:3 Key Features 1-5:4 California Privacy Law - What It Is Not. Chapter2 2-1 California Privacy Laws From A to Z 2-2 ARTICLE 1 OF THE CALIFORNIA CONSTITUTION 2-2:1 Who and What Data Is Protected? 2-2:2 Who Must Comply? 2-2:3 How to Comply? 2-2:4 Sanctions and Remedies 2-3 BEING LEFT ALONE 2-3:1 Who and What Data Is Protected? 2-3:2 Who Must Comply? 2-3:3 How to Comply? 2-3:4 Sanctions and Remedies 2-4 COMPUTER INTERFERENCE LAWS 2-4:1 Computer Fraud and Abuse Act 2-4:1.

1 Who and What Data Is Protected? 2-4:1.2 Who Must Comply? 2-4:1.3 How to Comply? 2-4:1.4 Sanctions and Remedies 2-4:2 California Comprehensive Computer Data Access and Fraud Act 2-4:2.1 Who and What Data Is Protected? 2-4:2.2 Who Must Comply? 2-4:2.3 How to Comply? 2-4:2.3a Website Terms and the Drew Case 2-4:2.

3b Unauthorized Computer Access by Employees or Ex-Employees 2-4:2.3c Scraping, Data Harvesting 2-4:2.4 Sanctions and Remedies 2-5 DATA SECURITY REQUIREMENTS 2-5:1 Security of Personal Information 2-5:1.1 Who and What Data Is Protected? 2-5:1.2 Who Must Comply? 2-5:1.3 How to Comply? 2-5:1.4 Sanctions and Remedies 2-5:2 Disposal of Customer Records 2-5:2.1 Who and What Data Is Protected? 2-5:2.

2 Who Must Comply? 2-5:2.3 How to Comply? 2-5:2.4 Sanctions and Remedies 2-5:3 Wireless Network Security 2-5:3.1 Who and What Data Is Protected? 2-5:3.2 Who Must Comply? 2-5:3.3 How to Comply? 2-5:3.4 Sanctions and Remedies 2-5:4 Social Security Numbers 2-5:4.1 General Restrictions 2-5:4.

2 Social Security Number Truncation on Pay Stubs 2-5:5 Payment Card Industry Standards 2-6. EMPLOYEE PRIVACY 2-6:1 Overview - Workplace Privacy in General 2-6:2 California Labor Code § 226 2-6:2.1 Who and What Data Is Protected? 2-6:2.2 Who Must Comply? 2-6:2.3 How to Comply? 2-6:2.4Sanctions and Remedies 2-6:3 California Labor Code § 435 2-6:3.1 Who and What Data Is Protected? 2-6:3.2 Who Must Comply? 2-6:3.

3 How to Comply? 2-6:3.4 Sanction and Remedies 2-6:4 California Labor Code §980 2-6:4.1 Who and What Data Is Protected? 2-6:4.2 Who Must Comply? 2-6:4.3 How to Comply? 2-6:4.4 Sanctions and Remedies 2-6:5 Other Laws Specifically Addressing Employers 2-6:5.1 California Labor Code § 1026 2-6:5.2 ID Device Implants - California Civil Code§52.

7 2-6:5.3 Background Checks - Fair Credit Reporting Act 2-6:5.4 Health Information 2-6:5.5 Polygraphs 2-6:5.6 Subpoenas 2-6:5.7 Anti-Discrimination Laws 2-7. FINANCIAL INFORMATION 2-7:1 Federal Financial Institutions Regulation -Gramm-Leach-Bliley Act 2-7:1.1 Who and What Data Is Protected? 2-7:1.

2 Who Must Comply? 2-7:1.3 How to Comply? 2-7:1.4 Sanctions and Remedies 2-7:2 Financial Institutions Regulation -California Financial Information Privacy Act 2-7:2.1 Who and What Data Is Protected? 2-7:2.2 Who Must Comply? 2-7:2.3 How to Comply? 2-7:2.3a Sharing With Third Parties That are Neither Affiliates Nor Financial Institutions 2-7:2.3b Sharing With Affiliates 2-7:2.

3c Sharing With Nonaffiliated Financial Institutions 2-7:2.4 Sanctions and Remedies 2-7:3 Consumer Reports, Background Checks - Federal Fair Credit Reporting Act 2-7:3.1 Who and What Data Is Protected? 2-7:3.2 Who Must Comply? 2-7:3.3 How to Comply? 2-7:3.3a Consumer Reporting Agencies 2-7:3.3b Users of Consumer Reports 2-7:3.3c Furnishers of Reports 2-7:3.

4 Sanctions and Remedies 2-7:4 Consumer Reports, Background Checks -California Consumer Credit Reporting Agencies Act 2-7:4.1 Who and What Data Is Protected? 2-7:4.2 Who Must Comply? 2-7:4.3 How to Comply? 2-7:4.3a Consumer Credit Reporting Agencies Compliance Obligations 2-7:4.3b Requirements on Users of Consumer Credit Reports 2-7:4.3c Obligations of Furnishers of Credit Information 2-7:4.4 Sanctions and Remedies 2-7:5 Debt Collection - Federal Fair Debt Collection Practices Act 2-7:5.

1 Who and What Data Is Protected? 2-7:5.2 Who Must Comply? 2-7:5.3 How to Comply? 2-7:5.4 Sanctions and Remedies 2-7:6 Debt Collection - California Law 2-7:6.1 Who and What Data Is Protected? 2-7:6.2 Who Must Comply? 2-7:6.3 How to Comply? 2-7:6.4 Sanctions and Remedies 2-7:7 Federal Right to Financial Privacy Act 2-7:8 California Right to Financial Privacy Act 2-7:9 The California Song Beverly Credit Card Act 2-7:9.

1 Who and What Data Is Protected? 2-7:9.2 Who Must Comply? 2-7:9.3 How to Comply? 2-7:9.3a Consent 2-7:9.3b Separating Data Collection From Credit Card Transaction 2-7:9.3c Express Statutory Exceptions 2-7:9.3d Returns and Refunds 2-7:9.4 Sanctions and Remedies 2-7:10 Collection of Personal/Credit Card Information in Retail Transactions 2-7:10.

1 Who and What Data Is Protected? 2-7:10.2 Who Must Comply? 2-7:10.3 How to Comply? 2-7:10.4 Sanctions and Remedies 2-7:11 Credit Card Full Disclosure 2-7:11.1 Who and What Data Is Protected? 2-7:11.2 Who Must Comply? 2-7:11.3 How to Comply? 2-7:11.4 Sanctions and Remedies 2-7:12 Other Laws Specifically Protecting Financial Information 2-7:13 Payment Card Industry Standards 2-8 GOVERNMENT 2-8:1 Federal Statues 2-8:2 California Statues 2-9.

HEALTH AND MEDICAL INFORMATION 2-9:1 GINA 2-9:1.1 Who and What Data Is Protected? 2-9:1.2 Who Must Comply? 2-9:1.3 How to Comply? 2-9:1.4 Sanctions and Remedies 2-9:2 HIPAA 2-9:2.1 Who and What Data Is Protected? 2-9:2.2 Who Must Comply? 2-9:2.3 How to Comply? 2-9:2.

4 Sanctions and Remedies 2-9:3 California Confidentiality of Medical Information Act (CMIA) 2-9:3.1 Who and What Data Is Protected? 2-9:3.2 Who Must Comply? 2-9:3.3 How to Comply? 2-9:3.4 Sanctions and Remedies 2-9:4 Other California Health Information Privacy Laws 2-9:4.1 Collection of Medical Information for Dir.