California SB 1386 extended to cover unencrypted health information. AB 1292 adds medical health and insurance information to the breach disclosure laws: http://www.scmagazineus.com/California-data-breach-disclosure-law-extended-to-cover-medical-records/PrintArticle/100459/. It will be interesting to see which organizations will have to notify after a breach in this upcomming year.