On July 1, 2003, a new privacy law took effect in California which may impact the way your company handles and stores personal information. Under the new law, a company that owns, licenses or maintains personal information of California residents may be required to notify those residents if a security breach enables an unauthorized person to acquire their unencrypted personal information. Due to the broad and sweeping nature of the legislation, all companies should consider the impact of the law on their security systems and internal procedures with respect to the handling of personal information.