California has extended its widely copied data breach notification law to encompass incidents including electronic medical and health insurance information.