“The California Consumer Privacy Act imposes a duty on businesses that collect or maintain Californians’ “personal information” to “implement and maintain reasonable security procedures and practices.”
[California Practice Guide: Civil Procedure Before Trail Claims & Defenses [citations to primary sources omitted]]