California’s SB 561 (CA | 2019) would allow individuals to bring suit against a company for a data breach that includes their personal information.
The caveat: companies would have to have failed to provide reasonable security precautions.
Insurance Journal | California Bills Would Add More Punch to Consumer Data Protection Law