California SB-1386 is a state data privacy law which protects personally identifiable information. California SB-1386 was signed into law September 25, 2002 and became effective July 1, 2003. The law applies to any person, business, or state agency that conducts business in California and owns or licenses unencrypted computerized data that includes personally identifiable information.

This law has been amended to include medical information and health information; it is now referred to as California AB-1298, which is provided as an expanded regulation in the SDK. If California AB-1298 is enabled, you do not need to also use this regulation as the same information is detected as part of AB-1298.

The regulation looks for at least one match to personally identifiable information, which may include:

  • Credit Card Number

  • Credit Card Track Data

  • US Drivers License Number

  • US Social Security Number