What the bill covers
Personal information is an individual's first name or first initial and last name, combined with a Social Security number, a driver's license or state identification card number, or an account, credit or debit card number with any required code or password.
A breach under the bill is an unauthorized acquisition of personal information that has not been secured by encryption or by any other method or technology that renders it unreadable or unusable. Data secured that way sits outside the bill's definition of a breach.