California Information Privacy Act (SB 1386) is a law requiring organizations that collect and store personal information on California residents to disclose any breach of security to those individuals affected.
As the law applies to any California resident, companies located outside California are also affected, though notification to non-California residents is not required.