J.M. v. Illuminate Education — California Supreme Court Redefines Data Breach Liability Under the CMIA
The California Supreme Court held that a CMIA breach occurs when medical data is exposed to a significant risk of unauthorized access — rejecting the prior ‘actually viewed’ standard and disapproving three Court of Appeal decisions.