---
title: "California security breach notice"
url: "https://ailawframework.com/precedents/privacy-data-protection-and-cyber/us-california-breach-notice"
type: "precedent"
site: "AI Law Framework"
id: "a25-us-california-breach-notice"
area_id: "A25"
kind: "notice"
ai_level: "yellow"
version: 1
task_ids: ["A25-T1-R3", "A25-A20260923-4", "A25-T1-R4"]
law_stated_as_at: "2026-10-22"
---

# California security breach notice

> Notice to a California resident under Civil Code § 1798.82, using the statutory title and headings. It leaves the facts in brackets.…

Canonical page: https://ailawframework.com/precedents/privacy-data-protection-and-cyber/us-california-breach-notice  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

Notice to a California resident under Civil Code § 1798.82, using the statutory title and headings. It leaves the facts in brackets. It does not decide that notice is required, and it is not the model form printed in the statute.

## Key facts

- Kind: Notice. A formal notice to serve or publish.
- Practice area: [Privacy, Data Protection & Cyber](https://ailawframework.com/precedents/privacy-data-protection-and-cyber.md)
- Jurisdictions: United States
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the 2 authorities it cites, for United States.

## When to use it

Use when the lawyer has decided that section 1798.82 requires notice to a California resident. Do not use it before that decision. Do not use the CCPA definition of personal information. Do not send it to an email account whose login credentials are the information that was breached.

## Used for these tasks

- [Assess a suspected data breach and draft the notification pack](https://ailawframework.com/practice/privacy-data-protection-and-cyber/assess-a-suspected-data-breach-and-draft-the-notification-pack.md)
- [Build a 48-hour incident chronology from the tickets and emails](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-48-hour-incident-chronology-from-the-tickets-and-emails.md)
- [Draft a data-breach incident response plan](https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-data-breach-incident-response-plan.md)

## How AI may be used

AI may place facts the lawyer has already confirmed under the statutory headings and calculate the 30-day and 15-day dates. The lawyer decides whether notice is required and approves every sentence before it is sent.

**AI may:**

- Place confirmed facts under the headings in section 1798.82(d)(1)
- Calculate 30 calendar days from discovery or notification, and 15 calendar days from consumer notice for an Attorney General sample
- Check a draft against the content list in section 1798.82(d)(2) and mark gaps

**AI must not:**

- Must not decide that notice is required, or that an exception applies
- Must not send the notice, or address it to the email account whose credentials were breached
- Must not describe CCPA personal information as if it were section 1798.82 personal information

**The lawyer checks:**

- The facts meet section 1798.82(a) or the notice is not sent, including encryption and the key or credential
- The title, the five headings, 10-point type and the paragraph (2) contents are present
- More than 500 California residents triggers the Attorney General sample within 15 calendar days, and other states are handled under their own statutes

## Authorities

- [California Civil Code § 1798.82 (security breach notification)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1798.82.&lawCode=CIV)
- [15 U.S.C. § 7001 (electronic notice, where the statute allows that method)](https://www.law.cornell.edu/uscode/text/15/7001)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/privacy-data-protection-and-cyber/us-california-breach-notice and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*