AN ACT CONCERNING BREACHES OF SECURITY INVOLVING ELECTRONIC PERSONAL INFORMATION.

Summary

The bill defines a breach of security as unauthorized access to electronic personal information that is not encrypted. It obligates any person who owns, licenses, or maintains such data to notify affected Connecticut residents and the Attorney General within 60 days of discovery, and to offer at‑no‑cost identity‑theft prevention services for at least two years. It also sets rules for how notice can be given and allows a delay if law‑enforcement needs it.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share