California’s SB 446 tightens breach-notification timing starting January 1, 2026—setting a 30-calendar-day clock for required notices after a breach is discovered (or after notice is received). For larger incidents, it also adds a faster California Attorney General submission timeline tied to consumer notification.
