This is a pretty well thought out report that provides some details of what California (and some other stares) are doing with respect to providing protection for PII by legislation. The last pages list URLs for legislation by a number of states. http://www.vigilantminds.com/files/vigilantminds_state_security_breach_legislation_whitepaper.pdf Larry -- Larry Medina Danville, CA RIM Professional since 1972 List archives at http://lists.ufl.edu/archives/recmgmt-l.html Contact [log in to unmask] for assistance