Ask Reggi Your Question Now
Can you summarize 36a CTGS 701b?
Regulated Activities - Secs. 36a-645 to 36a-860a > Breach of security re computerized data containing personal information. Notice of breach. Provision of identity theft prevention services and identity theft mitigation services. Delay for criminal investigation. Means of notice. Exeption from public disclosure. Unfair trade practices.
Short Summary
This legal document governs the breach of security regarding computerized data containing personal information. It requires any person who owns, licenses, or maintains such data to provide notice of any breach of security to residents of Connecticut whose personal information was breached or reasonably believed to have been breached. The notice should be provided without unreasonable delay but not later than sixty days after the discovery of the breach. If additional residents are identified after sixty days, they should be notified as soon as possible. The person responsible for the data breach should also notify the Attorney General. Additionally, the person should offer identity theft prevention services and, if applicable, identity theft mitigation services to affected residents at no cost for a period of not less than twenty-four months. The document also specifies means of notice, including written notice, telephone notice, electronic notice, and substitute notice. It allows for a reasonable delay in notification if requested by a law enforcement agency for a criminal investigation. The document exempts certain information from public disclosure and considers non-compliance as an unfair trade practice enforceable by the Attorney General.
Whom does it apply to?
Any person who owns, licenses, or maintains computerized data that includes personal information, any person that maintains computerized data that includes personal information that the person does not own
What does it govern?
Breach of security re computerized data containing personal information, notice of breach, provision of identity theft prevention services and identity theft mitigation services, delay for criminal investigation, means of notice, exception from public disclosure, unfair trade practices
What are exemptions?
No exemptions are mentioned.
What are the Penalties?
Failure to comply with the requirements of this section shall constitute an unfair trade practice for purposes of section 42-110b and shall be enforced by the Attorney General.
Jurisdiction
Connecticut