small and medium host to be screwed
http://info.sen.ca.gov/pub/01-02/bil...chaptered.html
July 1 is the effective date that if your server has a breach and you
a) host
b) have clients
c) do buisness
in California
you have to report the breach to your clients.
if you do not report the breach, you could be subject to class action lawsuits from your clients.
To trigger the law, a breach must expose certain type of information: specifically, customers' names in association with their social security number, drivers license number, or a credit card or bank account number
We have had the long standing policy of never accepting a cc transaction from our servers but placing that libility to someone else. we don't even see the transaction until it's cleared. So I know I'm clear. and just about anybody that uses a host charge or 2checkout is clear. This ofcourse as long as they don't have any access to the cc transaction.
OH how fun it is.
Mike
