Industry lawyer: California privacy law details little-noticed cybersecurity exemptions

California's new privacy law provides more clarity than Europe's General Data Protection Regulation when it comes to explaining little-noted cybersecurity-based exceptions to requirements that companies honor individuals' data deletion requests, according to an industry lawyer who has worked on privacy and data security issues as general counsel to the Commerce Department. 

“Both the GDPR and the [California Consumer Privacy Act] include some mechanisms for exceptions or limitations on the individual rights that are granted,” Mayer Brown's Kendall Burman told Inside...