Requiring a business to destroy or arrange for the destruction of
records that contain specified personal information in a specified
manner; requiring a business that compiles, maintains, or makes
available specified personal information of an individual residing in
the State to implement and maintain specified security procedures and
practices; requiring businesses that compile, maintain, or make
available specified records to notify specified individuals of a
breach of the security of a system under specified circumstances, etc.