Can you list the exact legal requirements for notifying customers after a ransomware attack on a small e-commerce website?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
Can you list the exact legal requirements for notifying customers after a ransomware attack on a small e-commerce website?
5 real searches · 1 real-search pass
California Civil Code 1798.82 data breach notification official text 30 days 2026Google ↗
OBSERVEDConsequence
California Attorney General data breach notification business notify 500 residents sample notice officialGoogle ↗
OBSERVEDConsequence
FTC data breach notification ransomware business customer notification requirements officialGoogle ↗
OBSERVEDConsequence
HHS HIPAA breach notification ransomware 60 days officialGoogle ↗
OBSERVEDConsequence
PCI DSS incident notification payment card data breach requirements officialGoogle ↗
OBSERVEDConsequence
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (5)
Classes come from the query-classifier (a local Laya model). 2 of 5 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT5 real searches · gpt-6
California Civil Code 1798.82 data breach notification official text 30 days 2026 Google ↗
California Attorney General data breach notification business notify 500 residents sample notice official Google ↗
FTC data breach notification ransomware business customer notification requirements official Google ↗
HHS HIPAA breach notification ransomware 60 days official Google ↗
PCI DSS incident notification payment card data breach requirements official Google ↗
- California Civil Code § 1798.82 (2025) :: 2025 California Code :: U.S. Codes and Statutes :: U.S. Law :: Justia · law.justia.com
- California DOJ – Submit Data Security Breach · oag.ca.gov
- Submit Data Security Breach | State of California - Department of Justice · oag.ca.gov
- Data Security Breach Reporting | State of California - Department of Justice · oag.ca.gov
- FTC – Data Breach Response: A Guide for Business · ftc.gov
- HHS – HIPAA Breach Notification Rule · hhs.gov
- PCI Security Standards Council – Responding to a Cardholder Data Breach · listings.pcisecuritystandards.org
- Regulation - 2016/679 - EN - gdpr · eur-lex.europa.eu
- Data breaches | Data protection guide for small business · edpb.europa.eu
- Application of the GDPR · commission.europa.eu
Queries
5 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
California Civil Code 1798.82 data breach notification official text 30 days 2026 OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 | |
California Attorney General data breach notification business notify 500 residents sample notice official OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 | |
FTC data breach notification ransomware business customer notification requirements official OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 | |
HHS HIPAA breach notification ransomware 60 days official OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 | |
PCI DSS incident notification payment card data breach requirements official OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 |