"will compel companies to tell customers upon request what personal data they've collected, why it was collected and what categories of third parties have received it. Consumers will also be able to ask companies to delete their information and refrain from selling it.
The new law will take effect Jan. 1, 2020"
https://abcnews.go.com/Technology/wireStory/latest-brown-signs-reaching-data-privacy-bill-56247508
This will be:
GOOGLE vs Gov. Jerry Brown
It's so ineffectual, i'm so sick of hearing about data-breaches, and then the outcry for data 'privacy'. We need data-protection. Encrypt that shit! then, even if it's stolen, the fuckers can't read it !?
It's so IT-infra 101 i can't believe it's still happening. Legislate for encryption, why hasn't that happened? Anywhere?
Tell me of a country that's legislated for encryption of commercially-derived data stored on web servers and i'll give 100 quid in that country's currency to the charity of your choice.
I can't believe it's not the law, it would totally null any data-theft.
I've spent the last 3 weeks helping a local company decrypt and restore data after a Scarab ransomware attack, the attackers not only ran the encrypt with a seperate key on every connected device, they also deleted data from the server that they didn't have space on the victim's local drive to encrypt (Scarab doesn't delete each individual file after the encrypt, it does a bulk-deletion after encryption, that's a design flaw). I did have a point but the beer has erased it.
Encrypt! Encrypt! Encrypt!