California amended its data breach notification law at the end of September, placing new requirements on companies offering identity theft prevention and mitigation services to those affected by data breaches. Additionally, the amendment prohibits the...