California privacy law stirs confusion over ‘personal information,’ other key cybersecurity issues

One thing privacy advocates actually like about California’s new privacy law is the way it generally defines personal data, but that definition does not apply to the legislation’s most celebrated, and controversial provision: the right of individuals to sue companies in the event of a data breach.

“That provision about lawsuits is one of the provisions that is going to be challenged by both people who want more aggressive regulation and people who want less aggressive regulation,” Wiley Rein partner...