A little-known California law, intended to combat identity theft, could have broad consequences when it goes into effect on July 1. Called SB 1386, the legislation requires all companies--even if they're not located in California--to notify their California-based customers of any security breach involving those customers' personal information.

However, online and mail order companies will probably find it easier to notify all of their customers when such a breach occurs, making SB 1386 in effect one of the first national--and possibly international--cyberdisclosure laws.