Compliance Evaluation

• Information security and privacy professionals are particularly concerned with language in SB1386 that includes liability related to personally identifiable information of California residents, regardless of where that data is collected and stored.
• You are asked to speak at an information security conference on the topic of how commercial Web sites doing business with California residents can ensure they are in compliance with SB1386.
• Use the study materials and any additional research needed to fill in knowledge gaps. Then discuss the following:
• What benefit might an Internet-based company that sells to California residents enjoy by enforcing the standards and criteria of SB1386?
• What challenges might an Internet-based company that sells to California residents experience specific to SB1386?
• Respond to an audience member who posits that an Internet-based company's risk of running afoul of SB1386 is too small to spend resources trying to mitigate the risk.