Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I ignore my obligations as a service provider with access to personal information in Connecticut? What are the requirements?

As a service provider with access to personal information in Connecticut, you cannot ignore your obligations. Connecticut State Labor Department maintains personal data and has specific requirements for disclosure and maintenance of personal data.

Requirements for Disclosure and Maintenance of Personal Data

  • Upon written request, the Connecticut State Labor Department must inform the individual whether or not the Agency maintains personal data on that individual, the category and location of the personal data maintained on that individual, and procedures available to review the records [1.1].
  • Except where non-disclosure is required or specifically permitted by law, the Connecticut State Labor Department shall disclose to any person upon written request all personal data concerning that individual which is maintained by the Agency. The procedures for disclosure shall be in accordance with Connecticut General Statutes Sections 1-15 through 1-21k. If the personal data is maintained in coded form, the Agency shall transcribe the data into a commonly understandable form before disclosure [1.1].
  • When an individual is asked to supply personal data to the Connecticut State Labor Department, the Department shall disclose to that individual, upon request, the name of the agency and the division within the agency which is requesting the data, the legal authority under which the agency is empowered to collect and maintain the personal data, the individual’s rights pertaining to such records under the Personal Data Act and the agency’s regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data [1.3].
  • To the greatest extent practical, automated equipment and records shall be located in a limited access area. Visitors to such limited access area must sign a visitor’s log and permit access to said area on a bona-fide need-to-enter basis only. Regular access to automated equipment is limited to operations personnel [1.5].

Requirements for Personal Service Agreements

  • No state agency may hire a personal service contractor without executing a personal service agreement with such contractor [3.1].
  • No state agency may, without the approval of the secretary, execute an amendment to a personal service agreement, which agreement has an original cost of more than fifty thousand dollars, or an amendment to any other personal service agreement, which amendment has a cost of one hundred per cent or more of the cost of the original agreement, increases the cost of the agreement to more than fifty thousand dollars, extends the terms of the agreement beyond a one-year period or is the second or subsequent amendment to the agreement. The secretary shall approve or disapprove a proposed amendment within fifteen business days after receiving it and any necessary supporting information [3.2].

Therefore, as a service provider with access to personal information in Connecticut, you must comply with the requirements for disclosure and maintenance of personal data, as well as the requirements for personal service agreements.

Source(s):
Jurisdiction

Connecticut