California breach notice changed to a 30-day deadline in 2026

What changed

California's breach-notice rule changed on January 1, 2026. Under SB 446 and the amended California breach-notice framework, notice must issue no later than 30 calendar days after discovery for covered California resident breaches.

Why it matters for exam prep

• Older prep often says only "without unreasonable delay," which is now too vague for California-specific prep.
• If a stem clearly points to a current California breach-notice rule after January 1, 2026, the safer answer is the 30-calendar-day deadline.

What to purge from old summaries

• "California breach notice is just prompt notice."
• "HIPAA timing is the only timing that matters here."

Primary source

• A48 SB 446 and Civ. Code section 1798.82 update. https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB446
• B1 California confidentiality overlay reference. https://leginfo.legislature.ca.gov/