SACRAMENTO, Calif. — A landmark data breach bill protecting credit and debit card holders from identity theft and creating new requirements on breach notification was progressing through the California legislature last week winning an overwhelming 55-2 bipartisan vote in the state Assembly.

The measure, drafted by the California Credit Union League, may have rougher sledding in the state Senate where retail groups and banks may oppose it, sources said.

"This is a huge victory for Californians, who will have additional safeguards in place every time they make purchases with a credit card," said William Cheney, league president and CEO.

Recommended For You

Among provisions, the measure provides notice to consumers as to which retailers lost their credit/debit card information, and when the information was lost.

It also requires retailers responsible for lost credit/debit card information to assume all costs of notifying consumers as well as costs of replacing the compromised cards.

In addition, it requires retailers to follow key provisions of the Payment Card Industry data security standards to ensure proper retention and protection of credit/debit card data.

NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.