Virtual data rooms in California

Virtual data rooms for California firms

California has 22,558 real estate offices, 18,655 accounting and tax firms, 22,821 law offices and 13,852 securities and investment firms with paid employees. Its breach notice rule runs on thirty days. ShareAndGo is a virtual data room for the documents these firms share during deals, audits and legal matters.

The firms that share confidential documents in California

County Business Patterns counted 1,029,689 employer establishments in California in 2023. Measured per person against the 50 states and DC, California ranks 10th for accounting, tax, bookkeeping and payroll firms, at 47.6 per 100,000, 14th for offices of real estate agents and brokers, at 57.5, and 22nd for securities and investment firms, at 35.3. Law offices number 22,821, or 58.2 per 100,000, which is 8th.

These are mostly small businesses. 16,528 of the state's law offices and 10,774 of its securities and investment firms have fewer than five employees.

  • Offices of lawyers: 22,821
  • Accounting, tax preparation, bookkeeping and payroll services: 18,655
  • Securities and investment firms: 13,852
  • Corporate and regional managing offices: 4,106
  • Offices of real estate agents and brokers: 22,558

Where those firms are

The Los Angeles-Long Beach-Anaheim, CA metro has 11,330 of California's 22,821 law offices, 50 percent. San Francisco-Oakland-Fremont follows with 2,984 and San Diego-Chula Vista-Carlsbad with 2,536.

By county, Los Angeles County leads with 8,461 law offices, ahead of Orange County (2,869), San Diego County (2,536) and San Francisco County (1,171). Those four hold 66 percent of the state's total.

Our Los Angeles, Riverside, San Diego and San Francisco pages go through their figures in detail.

What sets California's metros apart

Against the national mix, Los Angeles runs heaviest in apparel manufacturing: 1,391 establishments, 6.5 times the share you would see across the country; performing arts and live entertainment (19,990, 5.9 times) and film, television and music production (8,672, 5.8 times) come next.

Warehousing is the sector that most marks out Riverside, at 748 establishments and 3.3 times the national share; trucking (4,134, 2.3 times) and plastics and rubber products (200, 1.6 times) come next.

San Diego's business mix leans furthest toward computer and electronic products, with 304 establishments at 2.4 times the national share; professional, scientific and technical services (16,216, 1.5 times) and real estate (6,696, 1.4 times) come next.

Against the national mix, San Francisco runs heaviest in publishing, including software publishing: 1,758 establishments, 3.4 times the share you would see across the country; data processing and hosting (744, 2.5 times) and internet and other information services (478, 2.2 times) come next.

How California compares

The Census Bureau estimated California's population at 39,431,263 in July 2024, down 0.3 percent from the April 2020 base of 39,555,674.

On law offices per 100,000 residents, California sits next to New York at 59.5 and Colorado at 58.1, against 58.2 here. Across the 50 states and DC the combined rate is 49.1.

Small offices make up 72 percent of the state's law offices, the same as across the 50 states and DC.

California's thirty-day breach clock

California Civil Code § 1798.82 governs disclosure of a breach of customer records.

A business must disclose a breach to a California resident whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. The section as currently served says that disclosure "shall be made within 30 calendar days of discovery or notification of the data breach."

Delay is allowed for law enforcement, or as necessary to determine the scope of the breach. Teams that need the extra time should be ready to explain which of those reasons applied.

No harm test, and a narrow encryption rule

Section 1798.82 has no risk-of-harm exception. If unencrypted personal information was acquired, the duty applies, and encrypted data is covered only where the key or credential was acquired too.

The notice itself must be titled "Notice of Data Breach" and use set headings.

Our California breach notification page sets out the data elements and the rule in full, and says which text we checked. This is general information, not legal advice.

What a ShareAndGo room gives a California team

For documents you share through ShareAndGo, the activity log records every view and download, and watermarked view-only pages carry the reader's email address and the date.

In each room the watermark is a setting that starts on, and a team can switch it off where it is not wanted. A six-digit code sent to the reader's email confirms the address, and no account is needed. The chained log covers views, uploads, downloads, invitations and changes, and it exports as CSV, so a team can sort readers by file and date in minutes instead of rebuilding the picture from email threads.

The courts and regulators behind California paperwork

Federal cases from Los Angeles and Riverside are heard in the U.S. District Court for the Central District of California.

Federal cases from San Diego are heard in the U.S. District Court for the Southern District of California.

Federal cases from San Francisco are heard in the U.S. District Court for the Northern District of California. CPAs practicing in California are licensed by the California Board of Accountancy.

California FAQ

How many law offices are there in California?
County Business Patterns 2023 counted 22,821 offices of lawyers with paid employees in California, 16,528 of them with fewer than five employees. Los Angeles County has the most, 8,461.
Does California allow a no-harm exception?
No. No risk-of-harm exception appears in § 1798.82.
When is the sample copy due?
Within 15 calendar days of notifying affected consumers, where more than 500 California residents were notified for a single breach.
Do people I share documents with need an account?
No. Readers confirm their email with a six-digit code, with no account to create.