Morgan Lewis partner Mark Krotoski and associate Kevin Benedicto authored an article for Law360 about California AB 1130, which was recently enacted and amends the state’s data breach notification law. In the article, Mark and Kevin discuss the implications of the expanded definition of “personal information,” incident response requirements, the CCPA, and best practices for companies preparing for the law to take effect on January 1, 2020.