Where: California
How many agencies had data security flaws? “high risk deficiencies” at 21 state agencies
What regulatory action was called for?
- comprehensive information security assessment at least every 3 years
- prompt resolution by agencies of security issues