California: Consumers Must Be Notified Directly of Data Breaches

Most importantly, the new law PDF available here, courtesy Information Law Group states that notification must be direct. Yes, it can be electronic, but it must provide a way for the notified party to follow up with questions, and give that person a point of contact who represents the company. The company contact must be accessible through toll-free telephone, not just e-mail.

via California: Consumers Must Be Notified Directly of Data Breaches.