California breach notice changed to a 30-day deadline in 2026

Study the current California 30-calendar-day breach-notice deadline instead of the older "without unreasonable delay" shortcut.

What changed

California's breach-notice rule changed on January 1, 2026. Under SB 446 and the amended California breach-notice framework, notice must issue no later than 30 calendar days after discovery for covered California resident breaches.

Why it matters for exam prep

Older prep often says only "without unreasonable delay," which is now too vague for California-specific prep.
If a stem clearly points to a current California breach-notice rule after January 1, 2026, the safer answer is the 30-calendar-day deadline.

What to purge from old summaries

"California breach notice is just prompt notice."
"HIPAA timing is the only timing that matters here."

Primary source

A48 SB 446 and Civ. Code section 1798.82 update. https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB446
B1 California confidentiality overlay reference. https://leginfo.legislature.ca.gov/

What changed

Why it matters for exam prep

Older prep often says only "without unreasonable delay," which is now too vague for California-specific prep.
If a stem clearly points to a current California breach-notice rule after January 1, 2026, the safer answer is the 30-calendar-day deadline.

What to purge from old summaries

"California breach notice is just prompt notice."
"HIPAA timing is the only timing that matters here."

Primary source

A48 SB 446 and Civ. Code section 1798.82 update. https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB446
B1 California confidentiality overlay reference. https://leginfo.legislature.ca.gov/