AN ACT CONCERNING BREACHES OF SECURITY INVOLVING ELECTRONIC PERSONAL INFORMATION.

Summary

The bill would force any entity that stores personal data to notify Connecticut residents and the Attorney General when a breach occurs, and to offer free identity‑theft protection. For breaches affecting 100,000 or more residents, the entity must hire a third‑party forensic examiner and submit a detailed report within 90 days, or face steep civil fines. Failure to follow these rules would also be treated as an unfair trade practice.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share